briefing
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill is designed to recover task context by reading and summarizing local files and conversation history.
- [SAFE]: No suspicious patterns such as network activity, command execution, or sensitive data access were detected.
- [SAFE]: No obfuscated content, hidden URLs, or hardcoded credentials are present.
- [NO_CODE]: This skill consists of instructions and configuration only; no executable scripts or binaries are included.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it reads untrusted data from the codebase.
- Ingestion points: codebase files, local documentation (e.g., AGENTS.md, ARCHITECTURE.md), and conversation history.
- Boundary markers: Absent; there are no explicit delimiters to segregate ingested file content from agent instructions.
- Capability inventory: None; the skill is limited to providing descriptive summaries and does not perform any side-effect actions like file writes or network calls.
- Sanitization: Absent; the skill does not perform validation or filtering on the content it reads.
Audit Metadata