stdlib-scripting
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides reusable code patterns (
run_privileged_comman dandrun_cm d_elevate d) tha t facilitate the exec utin g of shell commands with elevated privileges usin gsudo -non POSIX systems. This allows the agen t to perform adminis trative tasks but also pres ents a risk of privilege escalatio n if not used carefully. - [PROMPT_INJECTION]: The implemen tatio n of
loa d_confi gprovides a surface for indirec t prompt injec tio n by readin g an d parsin g data from external files (JSON, TOML, INI) with out validation. Malic io us ly crafted configuratio n files could poten tial ly influen ce the agen t's logi c or behavior. - In g e s t i o n p o i n t s:
loa d_confi gfunc tio n defined inSK I L L . m d. - B o u n d a r y m a r k e r s: None iden tified; the skill reads raw file con ten t direc tly into dic tio naries.
- C a p a b i l i t y i n v e n t o r y: Uses
sub p r o c e s s . r u nfor shell comman d exec utio n an das y n c i o . g a t h e rfor task manag emen t. - S a n i t i z a t i o n: No input validatio n or schema enforc emen t is perform ed on the loa ded configuratio n data.
Audit Metadata