sed-awk
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or hardcoded credentials were identified. The content consists of instructional material for common Unix utilities.
- [COMMAND_EXECUTION]: The skill teaches the agent how to use powerful CLI tools such as
sed,awk,find, andxargs. These tools can perform significant file system operations, including in-place editing (sed -i) and bulk processing of files (find -exec). - [DATA_EXFILTRATION]: Documentation examples illustrate reading system files like
/etc/passwdand system logs (/var/log/syslog). While these are standard educational examples for text processing, they represent access to potentially sensitive system data. - [PROMPT_INJECTION]: The skill describes processing data from external files, which creates an attack surface for indirect prompt injection.
- Ingestion points: Input files and stream data (e.g.,
file.txt,data.csv,access.log). - Boundary markers: Absent; there are no instructions to delimit or ignore instructions embedded within the files being processed.
- Capability inventory: Includes file system modification (
sed -i) and execution of commands viafind -execandxargs. - Sanitization: Absent; the skill does not provide mechanisms for validating or sanitizing the content of the files it processes.
Audit Metadata