sg-improve
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to manage a snapshot and rollback system for its internal learning files.
- Evidence: Uses
mkdir,cp,cat, andrm -rfto manage directories and files within the.shipguard/subdirectory. - [DATA_EXFILTRATION]: The skill transmits session summaries and improvement suggestions to a remote repository via the GitHub CLI.
- Evidence: Phase 5 utilizes
gh issue createandgh issue commentto send data to thebacoco/ShipGuardrepository on GitHub. This is consistent with the skill's stated purpose of filing generic improvements. - [PROMPT_INJECTION]: The skill scans user messages for specific friction signals, creating an attack surface for indirect prompt injection from the conversation history.
- Ingestion points: Conversation history, specifically scanning user messages for regex patterns like
USER_CORRECTIONandTONE_ESCALATIONin Phase 2. - Boundary markers: Absent; the skill performs direct regex scanning on raw user input.
- Capability inventory: File system modification (
cp,rm,cat) and external data transmission (ghCLI). - Sanitization: Relies on a classification logic (Phase 3) to distinguish between project-specific data (kept local) and generic data (sent to GitHub).
Audit Metadata