superset-standup
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local CLI commands (
superset workspaces list,superset tasks list,superset terminals list,superset terminals read) to gather state information. These commands are consistent with the skill's purpose and the author's identity (superset-sh). - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests terminal output to generate summaries.
- Ingestion points: terminal data read via
superset terminals readinSKILL.md. - Boundary markers: None explicitly defined to separate terminal content from instructions.
- Capability inventory: Subprocess calls to
supersetCLI for listing and reading workspaces, tasks, and terminals inSKILL.md. - Sanitization: No explicit sanitization or filtering of terminal content is performed before interpolation into the report.
Audit Metadata