final-report
Warn
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a shell command
python scripts/generate_report.py code_review_data.json --type code-review. The scriptscripts/generate_report.pyis an external dependency not provided within the skill bundle, making its actions and security posture unverifiable. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests findings from external, potentially untrusted codebases and interpolates them into structured reports and data files.
- Ingestion points: Review findings from Phases 1 through 5, as described in
SKILL.md. - Boundary markers: Absent; there are no specific delimiters or instructions to ignore malicious content embedded within the findings.
- Capability inventory: Shell command execution via
python scripts/generate_report.py. - Sanitization: None; the instructions do not specify any validation, escaping, or filtering of the finding content before it is used as input for the report generation script.
Audit Metadata