token-efficiency
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run local utility scripts and CLI tools to gather data and monitor status. Specifically, it mentions
python TOOLS/usage_report.pyfor analyzing session history andTOOLS/Wait-External.ps1(which uses the GitHub CLIgh) to monitor external CI runs. - [EXTERNAL_DOWNLOADS]: The documentation in
references/shell-output-compression.mdrefers to an installer mechanism that fetches catalog tags and validates candidate versions of the RTK utility. This indicates the presence of a lifecycle management system for the skill's dependencies. - [DYNAMIC_EXECUTION]: The skill utilizes a local shell hook (
TOOLS/hooks/rtk_safe_hook.py) to dynamically intercept and rewrite the output of specific shell commands likegit status,pytest, andcargo test. This is intended to reduce token usage by compressing human-facing output while preserving raw output for machine-readable tasks. - [INDIRECT_PROMPT_INJECTION]: The process of rewriting shell output introduces a surface where external command results (like test failures or git logs) are interpreted and modified before reaching the agent.
- Ingestion points: Shell command outputs from
git,pytest,cargo, andgo testprocessed by the RTK safe hook. - Boundary markers: The instructions explicitly define a 'safe set' of commands and warn the agent not to filter input intended for parsers or hash checks.
- Capability inventory: The skill includes Python scripts, PowerShell scripts, and shell command execution via the
ghCLI. - Sanitization: The skill advocates for a specific hook parser with regression tests to ensure the correctness of the shell output transformation.
Audit Metadata