sdd-archive

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands (mkdir -p, mv, date) to create directories and move files into an archive. These operations are restricted to the local file system and are used solely for the documented purpose of archiving project documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads from potentially untrusted files (feature.md, plan.md) and uses their content to update documentation, which is a common surface for indirect prompt injection.
  • Ingestion points: Reads feature.md, plan.md, review.md, and impl-summary.md from the project root.
  • Boundary markers: Absent. The agent is instructed to read files in full without specific delimiters or warnings to ignore instructions embedded in the data.
  • Capability inventory: Includes file system creation (mkdir), file movement (mv), and file modification (project.md).
  • Sanitization: Absent. The skill extracts content directly from the input files to populate tables and lists in the project documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 12:53 PM