friction-log
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash script templates for the agent to list, create, and manage directory structures and files within the project's
.astroshot/friction-logs/workspace. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection, as it is designed to ingest and follow instructions authored in external
prompt.mdfiles. - Ingestion points: The agent reads scenario instructions from
.astroshot/friction-logs/<slug>/prompt.md(SKILL.md). - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are defined for the prompt file content.
- Capability inventory: The agent can execute shell commands, write to the filesystem, and interact with browser automation skills like
agent-browser(SKILL.md). - Sanitization: There is no evidence of sanitization or validation of the authored scenario content before it is processed by the agent.
Audit Metadata