ce-todo-create
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands such as
mkdir -pto create directories andmvto rename files during the todo lifecycle (e.g., renaming a file frompendingtoready). These are standard operations for managing a file-based tracking system. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes data from external files.
- Ingestion points: The skill reads markdown files from
.context/compound-engineering/todos/and the legacytodos/directory (SKILL.md). - Boundary markers: None identified; the instructions do not specify delimiters or warnings to ignore instructions embedded within the todo files.
- Capability inventory: The agent is authorized to use shell commands (
mkdir,mv) and file system search/read tools as described in the workflows (SKILL.md). - Sanitization: No sanitization or validation of the content within the markdown files is specified before the agent processes them for triage or resolution.
Audit Metadata