peon-ping-log
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local bash script located at
~/.claude/hooks/peon-ping/peon.shwith specific subcommands (trainer log,trainer status). - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied values for
<count>and<exercise>and interpolates them directly into a shell command string. - Ingestion points: User-provided values for exercise count and type as described in the
SKILL.mdusage section. - Boundary markers: None present to delimit user input or explicitly instruct the agent to sanitize the input before command construction.
- Capability inventory: The skill utilizes shell execution via the bash tool across its primary functions.
- Sanitization: No sanitization, validation, or escaping steps are defined for the user-provided parameters in the skill instructions.
Audit Metadata