negafix
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEMETADATA_POISONINGCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: There is a naming discrepancy between the skill metadata, which attributes authorship to "Ihor Orlovskyi," and the provided author context of "sentimony."
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands (
rg,git log) to inventory and audit project files for specific linguistic patterns. - [PERSISTENCE]: The skill facilitates behavioral persistence by providing a git hook (
scripts/commit-msg) to enforce writing style on new commits and recommending the addition of instructions to persistent project files (CLAUDE.mdorAGENTS.md) to maintain constraints across sessions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could contain malicious directives.
- Ingestion points: Scans the local working tree and git history commit messages (SKILL.md).
- Boundary markers: The skill contains explicit "Security Model" instructions telling the agent to treat scanned content strictly as data and never to follow directives found in scanned text.
- Capability inventory: Includes the ability to write to files in "Fix mode" and execute local shell commands for auditing.
- Sanitization: Relies on the agent's adherence to the instruction-boundary guidelines provided in the Security Model section.
Audit Metadata