maintenance-scheduling
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
!commandsyntax via$ARGUMENTSto focus its analysis on specific maintenance areas provided by the user. This is a standard feature for parameterizing skill execution. - [DATA_EXPOSURE]: The skill attempts to read CMMS platform configurations and asset data. This is consistent with its primary purpose of maintenance analysis and does not involve exfiltration to external domains.
- [PERSISTENCE]: The skill appends execution metadata to
~/.claude/projects/skill-telemetry.mdif the directory exists. This is used for internal 'self-evolution' telemetry and does not represent a malicious persistence mechanism. - [INDIRECT_PROMPT_INJECTION]: The skill processes external CMMS data and work orders. While this presents an ingestion surface for untrusted data, the skill's capabilities are restricted to generating a report in
docs/maintenance-scheduling-analysis.md, minimizing the risk of a privilege escalation chain.
Audit Metadata