sjinn-task-status

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the sjinn CLI to perform authentication checks and status queries.
  • Evidence: The skill executes sjinn --version, sjinn auth whoami, and sjinn status <task_id> --json within the workflow defined in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data returned by the CLI tool, which represents a potential surface for instructions embedded in task results or error messages.
  • Ingestion points: Data is ingested from the JSON output of the sjinn status command in SKILL.md.
  • Boundary markers: Not present; the instructions do not include specific delimiters for the CLI output.
  • Capability inventory: The skill is limited to shell execution of the sjinn CLI tool.
  • Sanitization: Not explicitly implemented; the skill relies on the agent's internal processing of tool output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:27 PM
Security Audit — agent-trust-hub — sjinn-task-status