done
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
git statusandgit logto check for uncommitted or unpushed changes. These are standard, read-only repository management commands used for the skill's primary purpose of session wrap-up. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for potential indirect prompt injection as it reviews the current session history for outstanding work.
- Ingestion points: Reviewing the current session history for unfinished tasks or loose ends (SKILL.md).
- Boundary markers: None present.
- Capability inventory: Execution of
git statusandgit logcommands (SKILL.md). - Sanitization: None present.
- [EXTERNAL_DOWNLOADS]: The documentation mentions the use of
npx skillsfor managing and updating the skill. This is a common pattern for AI agent skill management by the author and is documented neutrally as a configuration note.
Audit Metadata