yes
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to utilize shell commands for system investigation and safety procedures, specifically using
cpfor file backups,lsoffor checking file locks, andgrepfor dependency analysis.- [PROMPT_INJECTION]: The skill employs strong imperative language and Iron Rules to override default agent behaviors and enforce its own operational framework. It also creates a surface for indirect prompt injection. 1. Ingestion points: Error messages, source code, and web search results (referenced in SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Bash (cp, grep, lsof, cat), curl, and WebSearch (SKILL.md). 4. Sanitization: Absent.- [EXTERNAL_DOWNLOADS]: The instructions mandate the use ofWebSearchandcurlto retrieve external data for error verification and documentation, introducing unverified remote content into the agent context.- [DATA_EXFILTRATION]: The skill encourages the use ofcurlandWebSearchto interact with external services for verification purposes. If combined with instructions to read sensitive local files like configuration files or environment variables, this creates a potential pathway for data exposure.
Audit Metadata