remind
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to verify repository state, including git operations to check branches and commit status. It runs a repository-local script located at
.claude/scripts/review-state.jsorscripts/review-state.jsusing Node.js to derive compliance metrics. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it is designed to ingest and repeat project rules to the agent. 1. Ingestion points:
CLAUDE.mdand project-specific rule files in therules/directory. 2. Boundary markers: Content is quoted within markdown blockquotes. 3. Capability inventory: The skill can execute shell commands viaBashand trigger other automated workflows via theSkilltool. 4. Sanitization: Rule content is quoted directly into the prompt without sanitization or escaping. - [COMMAND_EXECUTION]: The skill demonstrates high autonomy by design, dynamically invoking other tools like
/codex-review-fastbased on the results of its state analysis without requiring additional user confirmation.
Audit Metadata