unknown-patterns
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The command
erudita installfetches data from an unverified registry, which is a potential vector for supply chain attacks. - COMMAND_EXECUTION (LOW): The skill invokes third-party binaries
eruditaandosgrep. Executing unverified local tools is a risk factor. - PROMPT_INJECTION (LOW): Potential for indirect prompt injection via data ingestion. 1. Ingestion points:
erudita installdownloads external content to the.eruditadirectory. 2. Boundary markers: Absent; no delimiters are used to wrap ingested content. 3. Capability inventory:osgrepsearches through and potentially displays the downloaded content. 4. Sanitization: None provided; the skill does not filter or sanitize documentation content before processing.
Audit Metadata