skill-researcher
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- PROMPT_INJECTION (LOW): Potential for indirect prompt injection via subagent-generated metadata.\n
- Ingestion points: Stage 6 reads
.return-meta.jsongenerated by a subagent.\n - Boundary markers: None. Data is treated as trusted JSON.\n
- Capability inventory:
Bash(jq, git),Tasktool (subagent spawning),Edittool.\n - Sanitization: Stage 1 validates
task_numberusingjq --argjson, which effectively prevents injection into subsequent shell-interpolated jq filters. The skill generally usesjq --argfor variable interpolation.\n- COMMAND_EXECUTION (SAFE): Bash commands are used for state management and git operations. The skill follows best practices by using argument passing for JSON manipulation rather than raw string concatenation where possible.
Audit Metadata