file-organizer
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as
ls,find,du,mkdir, andmvto analyze and organize the filesystem. These commands are executed based on user-defined target directories and are core to the skill's operation. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the filesystem (filenames and metadata) and has the capability to move or rename files.
- Ingestion points: File names, metadata, and types are retrieved from the local filesystem via
ls,find, andfilecommands inSKILL.md. - Boundary markers: The skill lacks explicit instructions or delimiters to ensure the agent ignores potential instructions embedded within the filesystem data it processes.
- Capability inventory: The skill includes commands for creating directories (
mkdir) and moving/renaming files (mv). - Sanitization: No specific sanitization or validation of the filenames or metadata is mentioned before the data is processed by the agent.
Audit Metadata