skills/bfollington/terma/strudel/Gen Agent Trust Hub

strudel

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script, scripts/strudel_url.py, to perform Base64 encoding and decoding of musical patterns. It also employs the grep command to search through its local technical reference files. These actions are standard utility functions for the skill's operation and do not involve unauthorized network access or privilege escalation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is intended to process and iterate on musical code and URLs provided by users, which creates a theoretical entry point for indirect instructions.
  • Ingestion points: The agent is instructed to accept Strudel code and URLs from users for playback and modification as described in SKILL.md.
  • Boundary markers: The skill does not define specific delimiters for separating user-provided music code from instructions.
  • Capability inventory: The skill possesses the ability to execute the local strudel_url.py script and perform file searches within its own directory.
  • Sanitization: The strudel_url.py script uses standard library functions for string manipulation (Base64 and URL encoding) and does not execute the data it processes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 11:40 AM