context-layer-health-check
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill initiates shell commands, specifically 'git log --merges' to retrieve historical data and 'scripts/lint' to perform validation checks. These are standard operations for a development-focused tool and do not involve unauthorized privilege escalation or unusual access.
- [INDIRECT_PROMPT_INJECTION]: The skill processes merge log data which can contain untrusted content from various contributors, creating a potential vector for indirect instructions.
- Ingestion points: Commit messages and merge headers retrieved via 'git log --merges' as described in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore or isolate potential commands embedded within the git log data.
- Capability inventory: The agent has the capability to execute shell commands and run local scripts.
- Sanitization: The skill does not specify any sanitization or validation of the ingested log content before it is processed by the agent for quality review.
Audit Metadata