x9-okf-adapt
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's operational logic depends on the execution of local system commands via Python's subprocess module. (1)
scripts/check_dependencies.pyexecutesrubyto verify the availability of the Psych YAML library. (2)scripts/insert_frontmatter.pyexecutesgitto extract author and committer timestamps from repository history. (3)scripts/okf_yaml.pyexecutes an embedded Ruby script viasubprocess.runfor robust YAML parsing and duplicate key detection. (4)scripts/test_okf.pyinvokesgitto set up test fixtures and runs the other skill scripts. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes untrusted Markdown content to suggest metadata. (1) Ingestion points: Markdown file content is read from the local filesystem in
scripts/insert_frontmatter.pyandscripts/validate_okf.py. (2) Boundary markers: Whilereferences/markup-agent-prompt.mdprovides guidance, the skill does not use explicit data delimiters when processing file content for metadata derivation. (3) Capability inventory: The skill can write to files and execute local commands (git, ruby, python). (4) Sanitization: The skill employsYAML.safe_loadpatterns and performs explicit validation on metadata fields.
Audit Metadata