context
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a durable context handoff mechanism by communicating with a platform-provided Unix domain socket. The implementation uses standard library functions and follows legitimate integration patterns for agent-based systems.
- [INDIRECT_PROMPT_INJECTION]: The skill manages durable iteration handoffs, which involves reading and writing arbitrary text that persists across agent sessions. This creates a surface where instructions embedded in the context data could influence the agent's behavior in subsequent iterations.
- Ingestion points: Data is ingested through the
setcommand argument inscripts/context.pyand retrieved via thegetcommand. - Boundary markers: No explicit boundary markers or "ignore" instructions are added by the script; the data is treated as an opaque string.
- Capability inventory: The script performs HTTP GET and POST requests over a Unix domain socket (
TARIBOY_TOOLS_SOCKET) to specific platform routes (/tools/context/get,/tools/context/set). It does not possess capabilities for external network access or arbitrary command execution. - Sanitization: The script does not perform sanitization or validation of the text content, as its purpose is to store and retrieve state exactly as provided by the agent.
Audit Metadata