groove-utilities-task-list
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/list-tasks-by-priority.shbuilds ajqfilter string using unsanitized shell variable interpolation:jq -s 'add | .[0:'"$LIMIT"']'. This pattern is vulnerable to injection if theLIMITparameter is supplied with malicious input. - [PROMPT_INJECTION]: The skill processes untrusted data from GitHub, Linear, and the beans CLI. Maliciously crafted task names or descriptions could potentially influence the agent's behavior during the 'parse and format' phase. Ingestion points: Data from
gh issue list,beans list, and Linear CLI. Boundary markers: No delimiters or safety instructions are used to isolate task content. Capability inventory: Access toBash(git, beans, gh, linear, npx),Read,Write, andEdit. Sanitization: No input validation or output escaping is implemented for task data.
Audit Metadata