standup-report
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
git logandgit configcommands to gather recent commit history. This activity is restricted to local repository metadata and is essential for the skill's primary reporting purpose.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests and processes data from external sources.\n - Ingestion points: Git commit messages and Jira ticket updates or comments are read and summarized into the report.\n
- Boundary markers: None identified. The skill does not use specific delimiters or instructions to ignore embedded commands within the gathered data.\n
- Capability inventory: The skill can execute shell commands (
git) and perform tool calls via the Atlassian MCP.\n - Sanitization: None identified. Data is interpolated directly into the markdown report format without escaping or validation.
Audit Metadata