deep-dive-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because its core purpose involves processing and analyzing untrusted content from files and system architectures.
- Ingestion points: The skill ingests external data using the
Read,Grep,Glob, andBashtools during its analysis phases. - Boundary markers: There are no explicit instructions or delimiters provided to ensure the agent ignores or isolates instructions that might be embedded within the files or systems it is analyzing.
- Capability inventory: The skill has access to powerful tools including
Bash,Read,Grep,Glob, andAgent, which could be exploited if an injection is successful. - Sanitization: The instructions do not include steps for sanitizing, escaping, or validating the content of the analyzed files before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill is configured to use the
Bashtool to perform technical deconstruction. While necessary for its stated purpose of 'System Analysis', this allows for the execution of arbitrary shell commands on the host environment.
Audit Metadata