user-file-ops
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from user-provided files and outputs it into the agent context via summary files.
- Ingestion points: The
scripts/summarize_file.shscript reads arbitrary files fromwork/inputs/andout/directories. - Boundary markers: No boundary markers or 'ignore' instructions are used when summarizing the content into the output file.
- Capability inventory: The skill uses basic Unix text utilities (
wc,awk,nl,sed,head) and does not possess network or high-privilege command execution capabilities. - Sanitization: No sanitization or filtering of the input file content is performed before generating the summary.
Audit Metadata