conductor-revert
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell-based git operations to discover and revert commits.
- Evidence: Executes
git log,git status, andgit revertcommands. - Evidence: Interpolates variables such as
{trackId},{X.Y}, and{sha}directly into shell command templates. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data files to determine task status and commit ranges, which represents a potential surface for indirect injection if these files are manipulated by an external actor.
- Ingestion points:
conductor/tracks.md,plan.md, andmetadata.json(SKILL.md). - Boundary markers: None specified for file content parsing.
- Capability inventory: File system read/write access and subprocess execution via
gitcommands. - Sanitization: No explicit sanitization or validation of the content within the project files before processing.
Audit Metadata