filesystem

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of the bash tool for common operations such as listing, copying, and moving files, as well as text processing with tools like grep and sed. These commands are standard for the skill's utility purpose.
  • [REMOTE_CODE_EXECUTION]: The skill includes Python recipes for parsing and writing JSON, CSV, and YAML files via the python_repl, enabling programmatic data transformation. These operations are conducted locally on the filesystem.
  • [SAFE]: The skill inherently presents an attack surface for indirect prompt injection as it processes file contents using execution tools. However, this is consistent with its role as a filesystem manager.
  • Ingestion points: File reading via read_file, grep, and Python file operations.
  • Boundary markers: None specified in the instructions.
  • Capability inventory: Shell access via bash, code execution via python_repl, and extensive file modification tools.
  • Sanitization: No explicit content validation or sanitization is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 03:54 PM