task-observer
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell utilities like
grep,sort, andtailvia the command line to manage observation numbering within its persistentlog.mdfile. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. Ingestion points: Monitors all task execution sessions and user feedback (SKILL.md). Boundary markers: Absent. Capability inventory: Shell command execution, file system read/write, and automated instruction generation for other skills (SKILL.md). Sanitization: Includes multi-layer PII stripping but lacks mechanisms to detect or filter adversarial instructions in observed data.
- [SAFE]: The skill contains a 'Confidentiality Safeguards' section defining a four-layer protocol to ensure that proprietary or client-identifying information is not leaked into generated skill files.
- [SAFE]: References to the author's GitHub repository for feedback and the use of 'npx skills' for installation are consistent with the vendor's own infrastructure and are documented neutrally.
Audit Metadata