sred-work-summary
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
find,sed, andsortto identify Git repositories within a user-provided directory. If the directory path is not properly sanitized or handled as a variable, it could lead to command injection vulnerabilities. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes and summarizes untrusted text from external sources without sufficient isolation.
- Ingestion points: Step 4 and Step 7 retrieve data from GitHub Pull Request titles and descriptions, the content of Notion documents, and Linear ticket details.
- Boundary markers: Absent. The instructions do not provide delimiters or specific directions to the agent to treat the ingested data as untrusted text.
- Capability inventory: The agent has permissions to interact with GitHub, Notion, and Linear APIs via MCPs or CLI tools, and the ability to execute local shell commands.
- Sanitization: Absent. No validation or filtering logic is defined to sanitize external content before it is interpreted by the agent.
Audit Metadata