keep-current
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple bash commands including
lsandgitto collect repository state, commit history, and directory structures from~/dev/claudeand~/dev/www-andrewriley-info.- [DATA_EXFILTRATION]: The skill performsgit pushoperations to synchronize documentation updates to a remote repository. This behavior is intended for the skill's purpose but involves sending local project state to an external server.- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingest content from multiple files to perform its audit. - Ingestion points: Reads
README.md,CLAUDE.md,PROFILE.md, and allSKILL.mdfiles found in theskills/directory. - Boundary markers: Absent. The skill does not use delimiters or explicit instructions to treat the ingested file content as untrusted data.
- Capability inventory: The agent has the ability to execute shell commands, read files, edit files, and push changes to remote repositories.
- Sanitization: None. The skill processes the raw text of the files directly to infer updates and communication patterns.
Audit Metadata