levelup-trace

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local setup scripts (scripts/bash/setup-levelup-trace.sh and scripts/powershell/setup-levelup-trace.ps1) to resolve project paths and configuration. It also uses standard git utilities (git diff, git log, git status) to gather evidence of modifications made during the session.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied input through the $ARGUMENTS variable in SKILL.md to influence the emphasis of the generated trace.
  • Ingestion points: SKILL.md via the $ARGUMENTS placeholder.
  • Boundary markers: None present; the input is interpolated directly into the instruction context.
  • Capability inventory: Local shell script execution, git command execution, and file system write access to the .adlc/drafts/ directory.
  • Sanitization: No explicit sanitization or instruction delimiters are used for the user input.
  • [SAFE]: All external operations are limited to the local repository context. No network requests are made, and no sensitive credentials or system files are accessed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 10:47 AM
Security Audit — agent-trust-hub — levelup-trace