jt-move-card
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses content from an external file (
card-loop/board.md) to drive execution flow, specifically determining which git branch to checkout. - Ingestion points: The skill reads
card-loop/board.mdto find the branch name indicated by the prefix 'สาขาคิว:' and to identify which task line to move. - Boundary markers: There are no explicit delimiters or safety instructions provided to ensure the agent validates the branch name or line content before processing.
- Capability inventory: The skill possesses the ability to perform
git checkout, modify local files, and executegit commitoperations. - Sanitization: The instructions lack explicit validation or sanitization steps for the data retrieved from the board file before it is used as a parameter for git commands.
Audit Metadata