od
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The installation script 'scripts/install.ps1' utilizes the 'sudo' command to acquire elevated privileges for package management operations on Linux platforms.
- [COMMAND_EXECUTION]: The skill includes scripts and documentation that execute system-level package managers, such as 'apt-get', 'dnf', 'pacman', 'apk', and 'brew', to install the 'od' utility. Evidence is found in 'scripts/install.sh' and 'references/install-and-setup.md'.
- [PROMPT_INJECTION]: The skill's primary functionality involves reading data from external files, which creates an indirect prompt injection surface. * Ingestion points: The agent is instructed to use 'od' to read binary or text files in 'SKILL.md' and 'references/cheatsheet.md'. * Boundary markers: The instructions do not provide explicit delimiters or guidance to ignore instructions embedded within the files being processed. * Capability inventory: The skill has the capability to execute shell commands and system-level installation scripts as defined in 'scripts/install.sh' and 'scripts/install.ps1'. * Sanitization: The tool does not perform validation or sanitization of the file content before presenting it to the agent's context.
Audit Metadata