exploration-optimizer
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts to manage its optimization and evaluation cycles. This involves executing scripts like
execute.pyandeval_runner.pywithin the local environment to automate skill refinements. - [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection because its primary purpose is to ingest, evaluate, and modify instructions from other skill files.
- Ingestion points: Files targetted by the
--targetparameter in theexecute.pyscript, such as other skills'SKILL.mdfiles. - Boundary markers: None identified in the skill instructions; the agent is directed to process the content of target skills directly.
- Capability inventory: The skill is granted
Bash,Read, andWritecapabilities, and it executes Python scripts that can modify repository content. - Sanitization: No specific sanitization or filtering logic is mentioned for the external skill data being processed.
Audit Metadata