scheduling
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs the
lettabot-schedulecommand-line tool for task lifecycle management (create, list, delete, enable, disable). This is a vendor-specific tool provided byletta-ai.\n- [PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection via the task message parameter.\n - Ingestion points: User or agent-provided text is passed to the
--messageflag inlettabot-schedule create.\n - Boundary markers: No specific delimiters or safety instructions are defined to encapsulate these messages when they are retrieved and processed.\n
- Capability inventory: The skill has the capability to execute the
lettabot-schedulecommand and manage persistent scheduled tasks.\n - Sanitization: There is no visible input sanitization or filtering applied to the message content.
Audit Metadata