longrunning-session
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs automated Git operations, including 'commit' and 'push', to synchronize project state and documentation as part of its orchestration workflow.
- [DATA_EXFILTRATION]: The skill synchronizes session-related data such as PRDs, technical requirements, and phase plans to a remote repository. It uses the repository's existing HTTPS configuration rather than hardcoded remotes.
- [PROMPT_INJECTION]: The skill processes data from markdown files and JSON queues to plan and execute work phases. While this is the intended workflow, it constitutes an ingestion surface for untrusted data if these files are modified by external sources.
- Ingestion points: Reads phase planning and queue data from the 'orchestration/' and '.codex/' directories.
- Boundary markers: None explicitly defined in instructions.
- Capability inventory: Includes file system writes and Git command execution.
- Sanitization: No specific sanitization logic is described for the processed data.
Audit Metadata