tracer-setup
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill (in
SKILL.md) executes shell commands, includinggit remote -vandgit check-ignore, to identify hosting providers and manage repository ignore rules.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads various repository files to inform its configuration process, which creates a potential surface for indirect prompt injection if those files contain adversarial instructions.\n - Ingestion points:
SKILL.mdinstructs the agent to readCLAUDE.md,AGENTS.md,CONTEXT.md,CONTEXT-MAP.md, and Architecture Decision Records (ADRs) withindocs/adr/.\n - Boundary markers: Absent; no explicit delimiters or instructions to ignore embedded content are specified for the read operations.\n
- Capability inventory:
SKILL.mdperforms file writes to create or updatedocs/agents/documentation,CLAUDE.md,AGENTS.md, and the root.gitignorefile, and executes Git commands.\n - Sanitization: Present; the skill is designed to present findings and draft content to the user for confirmation before performing any write operations.
Audit Metadata