stage-routine-files
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions that explicitly command the agent to bypass review and inspection of file contents before performing actions.
- Evidence: "Stage routine generated and dependency files without reviewing them." (Description)
- Evidence: "Do not inspect file contents or Git diffs to rediscover these changes." (Input section)
- These instructions aim to override the agent's default behavior of verifying changes before executing potentially impactful actions like
git add, which is a safety-critical behavior in development environments. - [COMMAND_EXECUTION]: The skill performs repository modifications using Git shell commands.
- Evidence:
git add -- <selected-paths> - Evidence:
git diff --cached --name-only -- <selected-paths> - While these are standard Git operations, the accompanying instructions to avoid inspecting the files being staged increases the risk of automated, unreviewed modifications to the repository. The skill targets specific configuration files including
entrysmith.config.js, which is a resource associated with the author's tooling.
Audit Metadata