tail
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The PowerShell installation script
scripts/install.ps1utilizesInvoke-Expressionto dynamically execute shell commands when checking for the presence and version of thetailutility. - [COMMAND_EXECUTION]: The installation script
scripts/install.ps1uses thesudocommand to request elevated administrative privileges during the installation of core utilities on Linux platforms. - [EXTERNAL_DOWNLOADS]: The skill's setup scripts (
scripts/install.shandscripts/install.ps1) initiate downloads from established system package repositories, including those managed byapt-get,dnf,pacman,apk,brew,winget, andchoco. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external data from log files, which creates a potential surface for indirect prompt injection.
- Ingestion points: The skill is designed to read and monitor files such as
app.log,/var/log/syslog, and other user-provided log paths usingtail -fandtail -ncommands. - Boundary markers: The instructions do not implement specific delimiters or safety prompts to isolate log content from the agent's command instructions.
- Capability inventory: The skill includes scripts for system-level installation and configuration (
scripts/install.sh,scripts/install.ps1) and suggests the use of command pipelines. - Sanitization: There is no evidence of filtering or sanitizing log entries before they are processed by the agent.
Audit Metadata