System
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes several command-line tools to perform maintenance and security tasks.
- Evidence: Uses
gitfor commit, push, and history analysis inGitPush.mdandDocumentRecent.md. - Evidence: Executes
trufflehogvia theSecretScan.tsutility to detect exposed credentials. - Evidence: Runs local TypeScript tools using
bun runfor index management and search operations. - [PROMPT_INJECTION]: Implements a customization system that allows overriding default skill behavior through local files.
- Evidence:
SKILL.mddirects the agent to load and applyPREFERENCES.mdand other resources from~/.opencode/skills/PAI/USER/SKILLCUSTOMIZATIONS/System/if the directory exists. - [PROMPT_INJECTION]: Maintains an indirect prompt injection surface by ingesting and processing session transcripts and filesystem content.
- Ingestion points: Reads transcript history in
DocumentSession.mdand audits the~/.opencode/directory structure inIntegrityCheck.md. - Boundary markers: No explicit delimiters or "ignore embedded instructions" warnings are specified for the ingested content during processing.
- Capability inventory: Capabilities include file writing (
Bun.write), subprocess execution (git,trufflehog,curl), and spawning sub-agents via theTasktool. - Sanitization: Employs redaction for detected secrets in
SecretScan.tsto prevent logging raw credentials. - [DATA_EXFILTRATION]: Performs network and git operations to manage system notifications and source code.
- Evidence: Sends POST requests to
http://localhost:8888/notifyfor local voice notifications. - Evidence: Pushes code to the author's repositories (
Steffen025/jeremy-2.0-claudecodeandSteffen025/pai-opencode) using theGitPush.mdworkflow. - [EXTERNAL_DOWNLOADS]: References the installation of external security tools from well-known sources.
- Evidence:
SecretScanning.mdandSecretScan.tsrecommend installing thetrufflehogsecurity scanner via Homebrew.
Audit Metadata