orx-evidence
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads terminal output from experiment runs, which is an external data source that could contain malicious instructions designed to influence the agent.
- Ingestion points: terminal logs retrieved via
orx logsas described inSKILL.md. - Boundary markers: none specified for the log content.
- Capability inventory: log reading, metric analysis, and report generation.
- Sanitization: no explicit sanitization of log content is described.
- [COMMAND_EXECUTION]: The skill executes the
orxcommand to retrieve persisted results, which is consistent with its intended use case and represents the primary functionality provided by the vendor.
Audit Metadata