skill-fitness
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands through Python's
subprocessmodule to perform its auditing functions. scripts/fitness.pyusesgit archiveandgit rev-parseto retrieve and analyze skills from local git repositories.scripts/trigger.pyexecutes theclaudeCLI tool to perform trigger tests that measure how the agent selects skills in response to specific prompts.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes session transcripts which contain potentially untrusted content from previous user and agent interactions.- Ingestion points: The skill reads Claude Code session history from
~/.claude/projects/*.jsonlinscripts/fitness.pyto identify recurring code patterns. - Boundary markers: Data is ingested as structured JSON from log files; the skill treats transcript content as data for analysis.
- Capability inventory: The skill can execute local
gitandclaudecommands and write to user-defined local baseline files. - Sanitization: Code snippets found in transcripts are analyzed statically using the Python
astmodule rather than being executed.
Audit Metadata