comet-archive
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the 'comet' CLI tool and 'git' for project state management, archiving tasks, and version control operations. These commands are executed with parameters derived from the project context and user confirmation.
- [INDIRECT_PROMPT_INJECTION]: The agent ingests data from local configuration files (e.g., .comet.yaml) and command outputs (e.g., git status, comet state). This information is used to drive the workflow and update project metadata.
- [DATA_EXFILTRATION]: The skill performs Git push operations and creates pull requests to remote repositories as part of its intended delivery function, following explicit user authorization and project configuration.
Audit Metadata