groove-utilities-memory-retrospective
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
git logto provide commit volume statistics. This is performed via a Bash environment restricted to git-prefixed commands. - [COMMAND_EXECUTION]: The skill references a
beansCLI tool to fetch incident data from a task backend. This tool is used for local data aggregation related to the retrospective summary. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface (Category 8) as it reads and summarizes content from local markdown files (
learned/*.md) and task backend outputs. - Ingestion points: Markdown files in the
.groove/memory/learned/directory and output from thebeansCLI tool. - Boundary markers: The skill does not employ specific delimiters or instructions to ignore instructions that might be embedded in the data it summarizes.
- Capability inventory: The skill is restricted to
Read,Glob, andBash(git:*)tools, with no permissions for file writing or network access, which limits the potential impact of an injection. - Sanitization: The skill performs structural parsing of data tables but does not sanitize the descriptive text from learnings or incidents before outputting them to the conversation.
Audit Metadata