weekly-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash,
yq,git, and theghCLI to automate product research workflows. It discovers configuration by searching parent directories forpulse-config.yamland constructs Git commands using values parsed from this file. Potential command injection exists if the configuration file contains shell metacharacters, though the skill operates on the assumption of a trusted local research environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external research data and analyst briefs, creating a surface for indirect prompt injection. Ingestion points: Reads
pulse-config.yaml,research-context.md, and historical reports like*-daily-research.mdinSKILL.md. It also processes data from sub-agents performing web research. Boundary markers: Employs a structured delegation model viaharness:delegatewith specific worker constraints. Capability inventory: Possesses file-writing capabilities, Git repository modification, and PR management. Sanitization: Implements 'verification seams' where the agent must re-verify all claims against primary sources and includes a formal adjudication phase for resolving conflicting evidence.
Audit Metadata