skills/sd0xdev/sd0x-harness/next-step/Gen Agent Trust Hub

next-step

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The analyze.js script executes local git commands (e.g., git diff, git status) and internal Node.js scripts to assess the current state of the repository.\n- [PROMPT_INJECTION]: The skill contains instructions for an automated execution mode (--go flag) and processes project data that could host indirect injections. \n
  • Ingestion points: git status output and markdown files in docs/features/.\n
  • Boundary markers: Data is summarized into JSON findings by analyze.js before being presented to the agent.\n
  • Capability inventory: Subprocess execution of git/node and agent-level Skill tool invocation.\n
  • Sanitization: Action arguments are filtered by the script to include only valid file paths and flags.\n- [DATA_EXFILTRATION]: The skill accesses repository metadata and local documentation files within the docs/features/ directory to track project progress and identify missing reviews or documentation updates.\n- [REMOTE_CODE_EXECUTION]: The helper script uses dynamic path resolution and require calls to load internal utility modules from the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 01:44 PM
Security Audit — agent-trust-hub — next-step