olares-knowledge
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted external data, which presents a surface for indirect prompt injection attacks where malicious content in URLs or torrent files could attempt to subvert agent instructions.
- Ingestion points: Processes arbitrary user-supplied URLs through
create,inspect, andfile existscommands; ingests local BitTorrent files viatorrent inspectandcreate --torrentas described inreferences/olares-knowledge-download-torrent.md. - Boundary markers: The skill explicitly instructs the agent in
SKILL.mdto seek user confirmation before performing actions such as creating, cancelling, or removing tasks, and before executing file removals or settings changes. - Capability inventory: The skill possesses capabilities including initiating network downloads, removing files within the Olares persistent volume (
drive/Home/...), and managing session credentials via cookie and token imports. - Sanitization: Instructions specify quoting parameters to handle special characters in URLs and note that the CLI performs local validation of status enums and file indices.
- [COMMAND_EXECUTION]: The skill relies on executing the
olares-clibinary to perform all download management tasks. The instructions define specific subcommand structures and parameters for interacting with the Olares platform services.
Audit Metadata