system-info
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
list_directory.pyscript exposes a surface where external input (a directory path) is used to perform file system discovery.\n - Ingestion points: The
pathargument inscripts/list_directory.pyaccepts arbitrary strings.\n - Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions are present in the scripts.\n
- Capability inventory: The script uses
pathlib.Path.iterdir()andpathlib.Path.stat()to read file system metadata.\n - Sanitization: The script uses
.expanduser().resolve()to normalize paths but does not restrict access to specific subdirectories.
Audit Metadata