comet-open
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of vendor-provided CLI tools (
comet,comet state,comet guard) to perform workspace management, state initialization, and artifact validation. These commands are executed as local subprocesses. - [EXTERNAL_DOWNLOADS]: Instructions specify loading external sub-skills such as
openspec-exploreandopenspec-new-changevia a platform Skill tool. The skill includes instructions to adapt and constrain these external commands using a local adapter (comet classic openspec). - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it processes untrusted user-provided content. * Ingestion points: User-provided PRDs, roadmaps, and product proposals are read and analyzed in
SKILL.mdandreference/batch-changes.md. * Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the user-provided documents. * Capability inventory: The agent has the ability to execute shell commands and write to the file system. * Sanitization: Names derived from the input are normalized to kebab-case, but the document content is used to populate artifact templates without further sanitization. - [DYNAMIC_EXECUTION]: The agent is directed to execute commands based on
argvandcwdvalues provided dynamically in the JSON output of thecometCLI tool during the artifact generation phase. This creates a runtime dependency on external tool output for command construction.
Audit Metadata