grok-repo
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local shell script (
scripts/archaeology.sh) to perform analysis on a repository's git history. The script exclusively uses standard, read-only command-line utilities includinggit,grep,awk,sort, anduniqto generate a digest of commits, authors, and file churn. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize data from external repositories, including source code and git commit messages. This creates a potential surface for indirect prompt injection.
- Ingestion points: The agent reads file content and git logs via the
git archaeologysection inSKILL.mdand thescripts/archaeology.shscript. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the ingested repository content.
- Capability inventory: The skill has the ability to execute shell commands via
scripts/archaeology.shand direct git commands (git show,git log,git blame) as described inSKILL.md. - Sanitization: There is no explicit sanitization or filtering of the repository data before it is processed by the agent.
Audit Metadata