dieworkwear
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from an external source.
- Ingestion points: Content is fetched from
https://dieworkwear.comand stored inreferences/articles.txtvia thescripts/sync.shscript. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between its own instructions and the content retrieved from the external site.
- Capability inventory: The skill utilizes shell commands including
grep,wc, and thesitefetchtool. - Sanitization: There is no evidence of sanitization, filtering, or validation performed on the downloaded content before it is synthesized by the agent.
- [EXTERNAL_DOWNLOADS]: The skill fetches menswear articles and guides from the official
dieworkwear.comwebsite to populate its knowledge base. - [COMMAND_EXECUTION]: Executes shell commands such as
grepto search the local knowledge base andsitefetchto synchronize content from the source website.
Audit Metadata