summarize-work
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local commands to gather context for work summarization.
- Uses
curlto interact with a local API server athttp://localhost:4096to fetch session metadata, messages, and todo items. - Executes
git diff,git diff --cached, andgit logto analyze local repository state. - Utilizes
sqlite3to query the local database at~/.local/share/opencode/opencode.dbas a fallback mechanism. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of untrusted data.
- Ingestion points: Fetches message content and titles from previous agent sessions via the
/session/<SESSION_ID>/messageAPI endpoint. - Boundary markers: Instructions do not specify explicit delimiters or "ignore" instructions when interpolating fetched session text into the summarization prompt.
- Capability inventory: The agent possesses the ability to execute shell commands (
curl,git,sqlite3) and read local files. - Sanitization: There is no evidence of sanitization or filtering of the historical session text before it is processed by the LLM for summarization.
Audit Metadata