sleep
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands after a delay or on a schedule. Examples in
SKILL.mddemonstrate patterns such asx sleep <time> <command>andx sleep schd -i <time> -- <command>. This is the primary intended function of the tool for automation and task management. - [PROMPT_INJECTION]: The skill processes external inputs as shell commands, presenting an indirect prompt injection surface. 1. Ingestion points: Shell commands are accepted as arguments in
SKILL.mdandSKILL.zh.md. 2. Boundary markers: Absent; no markers are used to delimit the command string or instruct the agent to ignore instructions within it. 3. Capability inventory: The skill uses thex sleeptool to execute subprocesses as shown in the examples inSKILL.md. 4. Sanitization: Absent; the skill does not implement validation or escaping for the commands being executed.
Audit Metadata