progress-brief
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git logandgit diffcommands to retrieve project history and statistics for report generation as described in the Data Collection step.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data fromgit log(commit messages) and thePROGRESS.mdfile. - Ingestion points: Reads task history and project status from
PROGRESS.mdand commit messages fromgit log. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the instructions for processing this external data.
- Capability inventory: The skill has the ability to write to the filesystem (creating/updating
PROGRESS.mdand generating report files) and execute shell commands via thegittool. - Sanitization: There is no mention of sanitization or validation for the content ingested from the repository's history or local files.
Audit Metadata