ar-status
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
log_results.py) located within the skill's own directory and uses thecatcommand to retrieve experiment status. These commands are used to aggregate and display results, which is the primary function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local
.autoresearchJSON files and the output of its internal logging script to present a dashboard to the agent. While this creates a surface for data ingestion, the risk is negligible as it involves local experiment metadata. - Ingestion points:
.autoresearch/{domain}/{name}/loop.jsonand output from{skill_path}/scripts/log_results.py. - Boundary markers: None present in the instructions.
- Capability inventory: Execution of
pythonandcatvia shell. - Sanitization: Standard handling by the agent environment is assumed for the command arguments.
Audit Metadata