successor-profile
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to manage files and check for environment configurations. Specifically, it uses
mkdirandcpto set up documentation templates from the plugin root andlsto check for an optional overlay directory defined by thePOWERSUIT_OVERLAYenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes various repository files (Markdown, YAML, JSON, and infrastructure code) to build the successor profile. Instructions that might be embedded in these files could influence the generated output.
- Ingestion points:
services/*.yml,.github/workflows/, Terraform files, Kubernetes manifests,hiring/rubrics/*.json, anddocs/*.md(SKILL.md). - Boundary markers: The instructions do not define specific delimiters or warnings to ignore embedded instructions in the processed data.
- Capability inventory: The skill can read repository files, create directories, and write to
docs/successor-profile.mdvia shell commands. - Sanitization: No explicit sanitization or filtering of external content is specified in the prompt instructions.
Audit Metadata