ln-401-task-executor
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches shared reference files and instructions from the author's public GitHub repository (
github.com/levnikolaevich/claude-code-skills) using a web fetch mechanism if local directories are missing. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface where task descriptions from external sources are used to influence the agent's behavior.
- Ingestion points: Task content retrieved through the Linear API (
get_issue) or by reading local markdown files indocs/tasks/. - Boundary markers: There are no defined delimiters or instructions provided to the agent to treat the task description as untrusted data or to ignore instructions embedded within it.
- Capability inventory: The skill allows powerful operations including arbitrary shell command execution via
Bashand file system modifications using various editing tools (edit_file,write_file). - Sanitization: No validation or sanitization steps are identified for the ingested task data before it is processed as instructions for implementation.
- [COMMAND_EXECUTION]: Employs the
Bashtool to execute verification commands, typechecking, and linting as part of the task lifecycle.
Audit Metadata