local-kanban-board
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes task files from
kanban/tasks/to generate a central board snapshot inkanban/BOARD.md.\n - Ingestion points: Task descriptions and metadata in
kanban/tasks/*.mdare ingested into the agent context during board generation and task listing operations.\n - Boundary markers: YAML frontmatter delimiters (
---) are used for metadata isolation, but task bodies are unrestricted and could contain instructions.\n - Capability inventory: The skill can read and write files, manage directory structures, and execute its own management script within the repository.\n
- Sanitization: Implements basic escaping for
sedcontrol characters when rendering task templates.\n- [DYNAMIC_EXECUTION]: Thescripts/kanbanutility dynamically loads shell variables from a repository-local configuration file using thesourcebuiltin.\n - Evidence: The script executes
source "$config_file"to load settings fromkanban/config.env. While this is a standard configuration pattern, it allows for the execution of shell commands if the configuration file is modified by an untrusted source.
Audit Metadata