file-archiver
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to path traversal attacks (ZipSlip/TarSlip) when extracting archives, as it does not validate the filenames inside the compressed files.
- Ingestion points: The
extract_archivefunction inscripts/file_archiver.pyprocesses archive files provided by the user or an external source. - Boundary markers: None identified. The skill directly processes the contents of the archive once requested.
- Capability inventory: The script uses
zipfile.ZipFile.extractallandtarfile.TarFile.extractallinscripts/file_archiver.pyto write files to the filesystem. - Sanitization: There is no sanitization or validation of the member filenames within the archive. Malicious archives containing paths like
../../etc/passwdcould lead to unintended file writes outside the specified output directory.
Audit Metadata