autonomous-loops
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides multiple shell script templates and command definitions (e.g.,
daily-dev.sh) that useclaude -pto automate multi-step development workflows, including code implementation, testing, and Git operations. - [PROMPT_INJECTION]: The skill describes architectures (Infinite Agentic Loop, Continuous Claude PR Loop, and Ralphinho) designed to ingest and act upon untrusted external data such as specifications, RFCs, and shared task notes.
- Ingestion points: Processes content from
docs/auth-spec.md,specs/component-spec.md, andSHARED_TASK_NOTES.mdas primary logic drivers in SKILL.md. - Boundary markers: The provided script examples and command definitions do not include boundary delimiters or instructions to the agent to ignore embedded commands within the processed data.
- Capability inventory: The loops rely on
claude -p, which possesses full capabilities for file modification, command execution via the Bash tool, and network access (e.g., throughghCLI commands mentioned in templates). - Sanitization: No sanitization or validation logic is demonstrated for the external content before it is interpolated into agent prompts.
- [EXTERNAL_DOWNLOADS]: References external third-party tools and repositories for loop orchestration, specifically
continuous-claudeandRalphinho. The skill correctly includes a warning recommending that users review the external code before execution.
Audit Metadata