import-art

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill executes standard file management commands such as 'mkdir' and 'cp' via the Bash tool. These operations are essential for the skill's purpose and do not pose a security risk in this context.
  • [PROMPT_INJECTION] (SAFE): The skill has an indirect prompt injection surface because it processes user-provided file paths and names. 1. Ingestion points: Arguments and from user input. 2. Boundary markers: Input variables are enclosed in double quotes within the bash templates. 3. Capability inventory: Uses the Bash tool for local file and directory operations. 4. Sanitization: No explicit sanitization or validation of input is performed beyond standard shell quoting.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 07:20 AM