velja
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes macOS command-line tools like
duti,defaults, andkillallto configure system-wide browser protocols and manage the Velja application state via the shell and Python subprocesses. - [DYNAMIC_EXECUTION]: Python scripts in the skill use
subprocess.runto execute system commands for lifecycle management of the application, such as terminating processes and relaunching the service to apply configuration changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes potentially untrusted URL strings to perform routing and sanitization tasks.
- Ingestion points: Raw URL strings processed by the
test_velja_routing.pyscript and defined within routing rule configuration files. - Boundary markers: No explicit boundary markers are used to isolate or distinguish untrusted URL data from instructions during processing.
- Capability inventory: The skill has the capability to execute shell commands and modify local configuration files (
.plist). - Sanitization: Implements custom regex-based logic to remove common tracking parameters from URLs.
Audit Metadata