sdd-archive
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (
mkdir -p,mv,date) to create directories and move files into an archive. These operations are restricted to the local file system and are used solely for the documented purpose of archiving project documentation. - [INDIRECT_PROMPT_INJECTION]: The skill reads from potentially untrusted files (
feature.md,plan.md) and uses their content to update documentation, which is a common surface for indirect prompt injection. - Ingestion points: Reads
feature.md,plan.md,review.md, andimpl-summary.mdfrom the project root. - Boundary markers: Absent. The agent is instructed to read files in full without specific delimiters or warnings to ignore instructions embedded in the data.
- Capability inventory: Includes file system creation (
mkdir), file movement (mv), and file modification (project.md). - Sanitization: Absent. The skill extracts content directly from the input files to populate tables and lists in the project documentation.
Audit Metadata