cc-req
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
findandgrepto perform file system operations. Specifically, it usesfindwith the-exec headpattern to scan existing requirement documents andgrepto identify downstream dependencies for change propagation. These operations are scoped to the project'swiki/directory and support legitimate documentation management tasks. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests and processes content from local Markdown files that could contain untrusted instructions.
- Ingestion points: Documentation files in
wiki/requirements/and other files within thewiki/directory are read during de-duplication checks and dependency tracking steps. - Boundary markers: The skill does not implement specific boundary markers or 'ignore' instructions when presenting the contents of ingested files to the agent.
- Capability inventory: The skill allows the agent to execute shell commands (
find,grep) and perform file system writes within the project'swiki/folder. - Sanitization: Content read from the local files is processed without explicit sanitization or validation against structural rules.
Audit Metadata