autonomous-common
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill installs and manages several shell hooks that are designed to execute automatically during git operations (commit, push) and AI agent tool use. These hooks are used to enforce a specific development workflow, such as blocking direct pushes to the main branch and ensuring test plans are created.
- [INDIRECT_PROMPT_INJECTION]: The skill includes utilities that ingest data from external sources like GitHub issue bodies (
mark-issue-checkbox.sh) and pull request review threads (verify-completion.sh,resolve-threads.sh). This data is used to determine workflow state or modify task completion status. - Ingestion points: GitHub issue bodies via
itp_read_taskand PR review thread details viachp_review_threads. - Boundary markers: The skill relies on structured JSON communication for hook data but does not use explicit boundary markers for the unstructured text data it processes.
- Capability inventory: Uses
gh apito patch issue bodies and resolve review threads; performs various git operations (commit,push,rebase,worktree); writes to local state files in.agents/state/. - Sanitization: Employs
sedfor character escaping inmark-issue-checkbox.shand relies onjqfor safe JSON handling. - [DYNAMIC_EXECUTION]: The
install-codex-hooks.shscript executes an embedded Python script at install time to safely parse and migrate TOML configurations. Additionally, the core library (hooks/lib.sh) uses complexawkprograms to perform static analysis of shell commands at runtime to detect git operations.
Audit Metadata