tail

Warn

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The PowerShell installation script scripts/install.ps1 utilizes Invoke-Expression to dynamically execute shell commands when checking for the presence and version of the tail utility.
  • [COMMAND_EXECUTION]: The installation script scripts/install.ps1 uses the sudo command to request elevated administrative privileges during the installation of core utilities on Linux platforms.
  • [EXTERNAL_DOWNLOADS]: The skill's setup scripts (scripts/install.sh and scripts/install.ps1) initiate downloads from established system package repositories, including those managed by apt-get, dnf, pacman, apk, brew, winget, and choco.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of external data from log files, which creates a potential surface for indirect prompt injection.
  • Ingestion points: The skill is designed to read and monitor files such as app.log, /var/log/syslog, and other user-provided log paths using tail -f and tail -n commands.
  • Boundary markers: The instructions do not implement specific delimiters or safety prompts to isolate log content from the agent's command instructions.
  • Capability inventory: The skill includes scripts for system-level installation and configuration (scripts/install.sh, scripts/install.ps1) and suggests the use of command pipelines.
  • Sanitization: There is no evidence of filtering or sanitizing log entries before they are processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — tail