cache-strategy
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill uses discovery commands to search for sensitive configuration strings like REDIS_URL and MEMCACHE inside environment files (.env). Accessing these files can expose sensitive credentials or connection strings to the agent's context during the infrastructure detection phase.
- [INDIRECT_PROMPT_INJECTION]: The skill performs broad searches across the local codebase using grep to identify query patterns and cache candidates. This ingestion of untrusted data from project files presents a potential injection surface.
- Ingestion points: Output of grep commands in Step 1 and Step 2 searching through project files.
- Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore malicious content within the grep results.
- Capability inventory: Bash (for discovery), Edit and Write (for modifying code), Read, Grep, and Glob (for inspection).
- Sanitization: Absent; the skill relies on the agent's interpretation of findings without explicit validation or filtering of the ingested content.
Audit Metadata