go
Warn
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes extensive shell logic using bash heredocs for version control management, file system organization, and tool invocation.\n
- Evidence:
references/phase2-scripts.mdandreferences/phase3-gate-logic.mdinclude scripts forgit push,git checkout,mkdir, andprettier.\n- [PROMPT_INJECTION]: The skill uses extremely forceful language to override agent behavior and processes external data from local plan files, creating an attack surface for both direct and indirect injection.\n - Evidence:
SKILL.mdemploys mandatory constraints like 'NON-NEGOTIABLE' and 'STOP AND READ', whilereferences/todo-merge-strategy.mdinstructs the agent to integrate data from~/.claude/plans/*.md.\n- [DATA_EXFILTRATION]: The workflow is designed to automatically sync local project artifacts and architectural records to remote git servers.\n - Evidence:
references/phase2-scripts.mdcontains automatedgit pushcommands that transmit local documentation to the repository's origin.\n- [REMOTE_CODE_EXECUTION]: The skill executes local Python scripts via theuvtool with paths constructed from environment variables.\n - Evidence:
references/preflight-checkpoint.mdinvokesuv run "$PLUGIN_DIR/.../preflight_validator.py"using a dynamically calculated plugin directory path.
Audit Metadata