mena-comms
Warn
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The file
scripts/list-vendors.mjsis a Node.js script designed to be executed by the agent. It accesses the file system to read vendor information. - [COMMAND_EXECUTION]: In
scripts/list-vendors.mjs, the script uses a path traversal pattern (../../../data/processed/vendors.json) to read a file from a location relative to the script but outside the skill's own directory. Accessing files across directory boundaries is a risk factor for unauthorized data exposure.
Audit Metadata