lore
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands and scripts to manage coding history and automate its workflows.\n
- Evidence: Executes
git logto identify session authors and attributes work correctly within a local environment.\n - Evidence: Runs internal Node.js scripts for corpus management and to validate forge plans before they are presented to the user.\n- [PERSISTENCE]: The skill manages its own installation and generates persistent artifacts derived from user history.\n
- Evidence: Installs by creating symlinks in standard AI agent configuration directories such as
~/.claude/skillsand~/.agents/skills.\n - Evidence: Automatically generates and stores new
SKILL.mdfiles that represent reproducible coding patterns discovered in the user's transcripts.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted transcript data but incorporates robust mitigations to prevent malicious prompt execution.\n - Evidence: Ingests markdown transcripts from history directories which could theoretically contain hidden instructions.\n
- Evidence: Features a
redactSecretssystem using regex patterns to strip AWS keys, GitHub tokens, and other sensitive credentials before data is analyzed by the LLM.\n - Evidence: Workflow scripts for subagents explicitly include security directives to treat transcript text as inert data, preventing the model from obeying instructions found within the mined history.\n- [EXTERNAL_DOWNLOADS]: The skill follows standard installation procedures for the agent ecosystem.\n
- Evidence: Recommends installation via
npxfrom the officialspecstoryairepository, which is the verified vendor for this skill.
Audit Metadata