autoresearch
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
Bashtool to autonomously execute shell commands for measurement and version control management, such as runningpython tests/bench.py,git commit, andgit revert. This is a core component of the intended autonomous improvement loop.\n- [DYNAMIC_EXECUTION]: The skill's protocol involves the agent programmatically modifying source files (Write/Edittools) and then executing that code via benchmarks or test suites to verify metrics. This runtime modification and execution of code is an intended feature of the workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the project environment while possessing significant execution capabilities. Ingestion points: Readsgit log,results log(TSV), and project source files via theReadtool as described in the Core Protocol. Boundary markers: No explicit delimitation or instructions to ignore embedded prompts in the processed data are present. Capability inventory: Includes theBash,Write,Edit, andAgenttools, allowing for file modification and command execution. Sanitization: There is no evidence of sanitization or validation of the ingested content before it is processed by the agent.
Audit Metadata