retro
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several local bash scripts to automate the retrospective workflow, including lesson retrieval and formatting.
- Evidence:
scripts/retro-lessons.shperforms text manipulation and file management operations using standard utilities likegrep,sed, andcat. - [PROMPT_INJECTION]: The skill provides snippets to be added to instruction-bearing files like
AGENTS.mdand.cursorrulesto modify agent behavior and ensure the retrospective tool runs automatically. - Evidence:
references/auto-trigger.mdcontains an 'Auto-Retro Rule' intended to persist agent instructions across sessions. - Ingestion points:
~/.agents/lessons/LESSONS.md(read byscripts/retro-lessons.shin theinjectsubcommand). - Boundary markers: Lessons are enclosed in
## Relevant Lessonsblocks and tagged with<!-- lessons-injected: ... -->HTML comments. - Capability inventory: The skill is capable of executing shell scripts and modifying local configuration files based on the content of its logs.
- Sanitization: Lesson content is extracted and placed into the context without specific escaping, which could allow instructions in the logs to be interpreted by the LLM.
Audit Metadata