axiom
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [Dynamic Execution] (LOW): The skill utilizes
bash -cto execute shell commands as a workaround for environment variable handling in specific agent environments. While functional, wrapping commands in strings for execution is a form of dynamic command construction. - [Data Exposure & Exfiltration] (LOW): The skill performs network operations to
api.axiom.coandaws.edge.axiom.co. These domains are required for the skill's primary function but are not included in the predefined whitelist of trusted domains. - [Indirect Prompt Injection] (LOW): The skill creates a surface for indirect prompt injection by processing external data (logs and events) that could contain malicious instructions.
- Ingestion points: User-provided log data and event payloads written to
/tmp/axiom_request.jsonand/tmp/axiom_ndjson.ndjson. - Boundary markers: Absent; data is passed directly to the API via curl.
- Capability inventory: File system write access and network communication via
curlexecuted throughbash. - Sanitization: None observed; the skill assumes the integrity of the data being ingested and sent to the platform.
Audit Metadata