solo-retro
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bashto execute git commands (git log,git branch,git diff) and shell utilities (ls,wc,sed) to analyze project state and logs. - [COMMAND_EXECUTION]: It identifies and executes build and test commands defined within the project's
package.jsonorCLAUDE.mdfiles during analysis phases. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes untrusted data from pipeline logs, progress reports, and project configuration files. * Ingestion points: Pipeline logs (
pipeline.log,iter-*.log),progress.md, git history, and configuration files (package.json,CLAUDE.md). * Boundary markers: The skill does not define explicit boundary markers or 'ignore' instructions for the parsed log content. * Capability inventory: IncludesBash(command execution),Write(file creation), andEdit(file modification). * Sanitization: No sanitization or validation is performed on the commands extracted from project configuration files before execution.
Audit Metadata