Witty Assistant
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it combines the processing of untrusted external content with the availability of high-privilege tools.\n
- Ingestion points: Data is ingested from the web using
web_searchandfetch_urltools defined inSKILL.md.\n - Boundary markers: The system prompt does not include markers to delimit external content or instructions to ignore embedded commands.\n
- Capability inventory: The skill has broad capabilities including
run_command,write_file_full, andcreate_skillpermissions as specified inSKILL.md.\n - Sanitization: No sanitization logic is implemented in
SKILL.mdor the helper scripts to clean external data before it is processed by the assistant.\n- [COMMAND_EXECUTION]: The skill configuration inSKILL.mdgrants the agent therun_commandandcreate_skilltool permissions, which enable the execution of arbitrary shell commands and the dynamic generation of new skill content on the host system.
Audit Metadata