sg-visual-review-stop
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script located at
visual-tests/build-review.mjsto handle server termination. - [COMMAND_EXECUTION]: Provides a shell fallback mechanism that uses
grep,awk,lsof, andkillto identify and terminate the process bound to a specific port. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface by reading data from a local file (
visual-tests/_results/.server.pid) to determine the port number for thekillcommand. - Ingestion points:
visual-tests/_results/.server.pid(reads the 'port' value) - Boundary markers: Absent
- Capability inventory: Shell command execution (
lsof,killviaxargs) - Sanitization: Absent; the port variable is interpolated directly into the shell command.
Audit Metadata