vp-session-wrapup
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including scratch files, logs, and Git repository state during its wrap-up procedure.
- Ingestion points: Local file system (scratch files, logs) and Git metadata (pull request state, uncommitted work).
- Boundary markers: Absent. The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill is designed to read files, list processes, and perform Git operations across the workspace.
- Sanitization: Absent. There are no explicit instructions to sanitize or escape the contents of logs or scratch files before they are summarized for the user.
Audit Metadata