context-layer-health-check
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is instructed to execute local scripts
scripts/lintandscripts/lint --reportto perform its health check tasks. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes untrusted data which could potentially contain malicious instructions. 1. Ingestion points: The agent reads data from
git log --mergesand various wiki content pages. 2. Boundary markers: No specific delimiters or safety instructions are provided to distinguish between data and instructions during processing. 3. Capability inventory: The skill has the capability to write to the file system (editing the wiki) and execute shell commands (scripts/lint). 4. Sanitization: The instructions do not specify any validation or sanitization of the ingested git logs or wiki content.
Audit Metadata