contribution-workflow-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local helper script '.agents/skills/platform/skill-lab.mjs' using Node.js to retrieve a list of changed files from a Git pull request. This is an expected functional requirement for the skill's contribution optimization workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of changed Skill files from a pull request for analysis.
- Ingestion points: Pull request changed Skill files (SKILL.md) identified via the 'pr-check' command.
- Boundary markers: Absent; the content of the changed files is processed directly to generate recommendations.
- Capability inventory: Executes a platform-internal Node.js script and produces markdown artifacts.
- Sanitization: Absent; the skill relies on the agent's internal reasoning to evaluate the content of the changed files.
Audit Metadata