wait
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the system
sleepcommand, which is a standard utility but involves interacting with the underlying operating system shell. - [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by accepting user-defined duration values that are subsequently used in a command execution context.
- Ingestion points: The user-supplied duration 'X' mentioned in SKILL.md.
- Boundary markers: Absent; the skill does not specify any delimiters or instructions to the agent to prevent the execution of injected commands.
- Capability inventory: The skill has the capability to execute shell commands (
sleep). - Sanitization: Absent; the skill lacks any instructions to sanitize or validate the user-provided duration input before command execution.
Audit Metadata