file-organizer
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands including
ls,find,du,md5,mkdir, andmvto perform its primary function of file system analysis and reorganization as described in SKILL.md. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it instructs the agent to analyze and make decisions based on untrusted data from the file system.
- Ingestion points: The agent reviews filenames, metadata, and file types using
ls,find, andfilecommands within the target directory as specified in SKILL.md. - Boundary markers: There are no explicit boundary markers or instructions to treat file metadata as untrusted data in the provided instructions.
- Capability inventory: The skill has the capability to create directories (
mkdir), move files (mv), and recommends file deletion to the user (SKILL.md). - Sanitization: There is no evidence of sanitization or filtering of file names or contents before they are processed by the agent.
Audit Metadata