ae-things-progress
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local command-line interface tool (
ae-cli) to fetch workspace data and append reports. - Evidence: The instructions explicitly direct the agent to run commands such as
ae-cli things +digestfor data collection andae-cli things entry appendfor writing report data back to the system. - [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from external workspace items (tasks, progress logs, entries) to generate summaries.
- Ingestion points: The agent ingests untrusted data from the output of
ae-cli things +digestand+detailas described inSKILL.md. - Boundary markers: There are no explicit instructions for the agent to use delimiters (like XML tags or triple quotes) when processing retrieved task descriptions or to ignore potential instructions embedded within those tasks.
- Capability inventory: The agent has the capability to write data back to the workspace using
ae-cli things entry appendas noted in the 'Output and Write Back' section ofSKILL.md. - Sanitization: No specific sanitization or filtering logic is prescribed for the data retrieved from external workspace items before it is used to generate reports or written back to the system.
Audit Metadata