workflow-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool for running local scripts and analysis commands such astime ./current-workflow.sh,grep, andawk. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to the ingestion and processing of untrusted log data from the environment.
- Ingestion points: Reads content from
workflow-log.txtandtiming-log.txtusing theGrepandReadtools. - Boundary markers: No explicit boundary markers or instructions to ignore potential commands embedded within the log files are provided.
- Capability inventory: The agent is granted access to high-privilege tools including
Bash,Write,MultiEdit, andTodoWrite. - Sanitization: There is no evidence of input validation or sanitization applied to the data retrieved from the local logs.
Audit Metadata