project-init
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a slide deck template from the author's GitHub repository:
https://github.com/a-green-hand-jack/progress-slides.git. - [COMMAND_EXECUTION]: Defines several shell commands for project management and hygiene, utilizing tools like
git,gh,uv,ruff,mypy, andpytest. It also references an execution path for a checking script located in a related skill directory:bash <submit-paper-skill-dir>/scripts/check.sh. - [PROMPT_INJECTION]: The skill creates agent guidance files (
AGENTS.mdandCLAUDE.md) which serve as ingestion points for agent instructions. This surface for indirect prompt injection is mitigated by boundary markers instructing agents to maintain visibility tiers and keep private guidance out of public/author-visible branches. The agent's capability inventory includesRead,Write,Edit,Bash, andGlobtools. There is no explicit sanitization for the generated documentation beyond the instructions provided to the agent.
Audit Metadata