system-time
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to use standard Linux utilities such as
date,ls, andtimedatectlfor time-related tasks. These are common system tools used for their intended purpose. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by accepting untrusted user data for date and timezone parameters.
- Ingestion points: User-provided date strings and timezone names used in shell commands (SKILL.md).
- Boundary markers: Absent; there are no delimiters or instructions to ignore embedded commands.
- Capability inventory: Execution of shell commands via the
dateandlsutilities. - Sanitization: Absent; the skill does not suggest escaping or validating user-supplied strings before interpolation.
- [NO_CODE]: The skill does not contain any executable scripts or binary files, consisting entirely of documentation and command-line instructions.
Audit Metadata