retiring-a-superseded-decision
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides conceptual guidance and best practices for documentation maintenance and the 'DRY' (Don't Repeat Yourself) principle.
- [COMMAND_EXECUTION]: The skill suggests using
git grep -nIi -- 'OldValue'to locate superseded strings throughout a repository. This is a standard and safe search operation within the agent's expected developer environment. - [EXTERNAL_DOWNLOADS]: The skill includes informational links to academic papers (via doi.org) and well-known technology services such as Google, Cognitect, and the Pragmatic Programmer. These references are for documentation and research purposes and do not involve automated installation or execution of remote code.
- [INDIRECT_PROMPT_INJECTION]: The skill's methodology involves searching and reading repository content to classify documentation hits, which creates a surface for indirect prompt injection. 1. Ingestion points: repository files found via git grep hits (SKILL.md). 2. Boundary markers: absent. 3. Capability inventory: repository file searching and reading. 4. Sanitization: none specified. This is an inherent risk in repository analysis tools and is considered safe given the skill's primary purpose.
Audit Metadata