task-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- File System Operations: The skill is designed to manage a local
TASKS.mdfile and copy adashboard.htmlfile from the plugin's root directory. These file-level interactions are central to the skill's purpose of tracking commitments and providing a visual interface for the user. - Indirect Prompt Injection Surface: The skill processes and summarizes data from an external file (
TASKS.md). While this presents a potential surface for indirect prompt injection if the file content is modified by an external source, the agent is directed to follow specific markdown templates and task formats, which helps maintain predictable behavior. - Command Execution Context: The skill references a
/productivity:startcommand and instructs the agent to perform file copy operations. These represent standard integration with the agent's environment to facilitate system setup and tool interaction.
Audit Metadata