privacy-auditor
Warn
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill searches for files that typically contain authentication secrets, private keys, and environment variables.
- Evidence: Scanning for patterns like
*.pem,*.key,*.env,credentials*,id_rsa, andid_ed25519usingfindinSKILL.md. - [COMMAND_EXECUTION]: Executes shell commands to access sensitive application data and system history.
- Evidence: Queries Chrome and Firefox cookie/history databases and macOS recent documents using
du,ls, andstatinSKILL.md. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing untrusted data from the local filesystem.
- Ingestion points: File names and paths retrieved via
findandlscommands inSKILL.md. - Boundary markers: Absent; no delimiters distinguish between file names and system instructions.
- Capability inventory: Shell command execution (bash) used for risk reporting.
- Sanitization: Absent; no evidence of escaping or validating file-system output before it enters the agent context.
Audit Metadata