hexdump
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function involves executing shell commands to inspect files and manage system packages. Specifically,
scripts/install.ps1usessudoto escalate privileges for updating and installing packages on Linux systems. - [COMMAND_EXECUTION]: Documentation in
references/troubleshooting.mdinstructs the agent to usechmod +rto modify file permissions, which involves direct system manipulation. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external, potentially untrusted binary data through
hexdump. This creates a surface for indirect prompt injection where malicious instructions embedded in processed files could influence agent behavior. - Ingestion points: Files provided by users are processed via
hexdumpinSKILL.mdandreferences/cheatsheet.md. - Boundary markers: The instructions do not define clear delimiters or warnings to ignore instructions found within the data being inspected.
- Capability inventory: The skill has access to shell execution for tool installation and file inspection.
- Sanitization: There is no evidence of sanitization or filtering of the file content before it is displayed to the agent.
Audit Metadata