context-layer-consolidation

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a local script scripts/lint to generate reports and validate changes. These scripts are part of the repository's local environment and do not involve downloading or executing code from external or untrusted sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and modify Markdown content from directories such as org/, areas/, and decisions/, which constitutes an ingestion surface for untrusted data.
  • Ingestion points: Markdown files located in org/, areas/, and decisions/ relative paths.
  • Boundary markers: None; the skill does not specify delimiters or instructions to ignore embedded prompts within the files it processes.
  • Capability inventory: The skill is authorized to perform file-write operations on Markdown documents and execute the local scripts/lint utility.
  • Sanitization: No explicit sanitization or filtering of the content being processed is mentioned in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:39 AM
Security Audit — agent-trust-hub — context-layer-consolidation