morpheus
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line utilities to gather project context and manage internal logs.
- Evidence: Executes
date,git rev-parse,find,ls, andmkdirto identify the project root and organize prediction files within theΈ/directory. - [EXTERNAL_DOWNLOADS]: The skill references common developer tools for repository scanning without performing automated installations.
- Evidence: Mentions the use of
ghqfor cross-repository pattern discovery and a local scriptdig.pyfor session history analysis. - [PROMPT_INJECTION]: The skill analyzes external data such as git logs and session history, which constitutes a potential surface for indirect prompt injection.
- Ingestion points: Reads from
git log,ghqmanaged repositories, and session history files. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the ingested data.
- Capability inventory: Includes the ability to execute shell commands for analysis and write findings to the project's metadata directory.
- Sanitization: No explicit sanitization or filtering of the ingested content is described in the logic.
Audit Metadata