filesystem
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
bashtool for common operations such as listing, copying, and moving files, as well as text processing with tools likegrepandsed. These commands are standard for the skill's utility purpose. - [REMOTE_CODE_EXECUTION]: The skill includes Python recipes for parsing and writing JSON, CSV, and YAML files via the
python_repl, enabling programmatic data transformation. These operations are conducted locally on the filesystem. - [SAFE]: The skill inherently presents an attack surface for indirect prompt injection as it processes file contents using execution tools. However, this is consistent with its role as a filesystem manager.
- Ingestion points: File reading via
read_file,grep, and Python file operations. - Boundary markers: None specified in the instructions.
- Capability inventory: Shell access via
bash, code execution viapython_repl, and extensive file modification tools. - Sanitization: No explicit content validation or sanitization is described.
Audit Metadata