team-init
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/team-init.shuseseval "$(resolve_team_levelup_paths)"to initialize environment variables. This pattern executes the output of a function as shell commands at runtime, which is a medium risk for local command execution if the helper function's output is manipulated. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze brownfield codebases to reverse-engineer patterns and generate Context Directive Records (CDRs).
- Ingestion points: The skill reads arbitrary source code from project sub-systems (e.g.,
src/auth/,services/payment/) during the Discovery and Pattern analysis phases. - Boundary markers: No explicit boundary markers or instructions to ignore embedded malicious content within the scanned code are present in the skill definition.
- Capability inventory: The skill has the ability to write to Git branches, execute shell scripts, and interact with the
team-ai-directivesrepository. - Sanitization: There is no documented sanitization or filtering of the ingested codebase content before it is passed to the Discovery, Pattern, and Synthesis agents.
- [COMMAND_EXECUTION]: The skill relies on shell scripts (
scripts/team-init.sh) and PowerShell scripts (scripts/team-init.ps1) to perform setup, resolve paths, and interact with Git repositories. It specifically sources helpers from a relative parent directory (../team-levelup/scripts/helpers.sh), creating a dependency on external skill components.
Audit Metadata