squad-refine
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
../squad/scripts/observe.py) and shell utilities such asjqandmktempto manage data and telemetry. These operations are performed using relative paths within the project's directory structure and are integral to the skill's workflow. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and analyzes data from external task descriptions and codebase contents.
- Ingestion points: Data is fetched from the task board API (
GET /task/$ID) and read directly from local files and schemas to provide context for the refinement interview. - Boundary markers: There are no explicit delimiters or safety warnings used when interpolating task descriptions into the analysis prompt.
- Capability inventory: The agent has permissions to read files, perform network requests via the
apitool, and execute local subprocesses. - Sanitization: The skill employs
jqto construct JSON payloads for API writes, which provides appropriate escaping for strings synthesized during the refinement process.
Audit Metadata