datetime
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to take arbitrary user-provided temporal expressions (e.g., 'tomorrow', 'next week') and execute them within a shell command via the 'date -d' flag using the Bash tool. This creates a surface for command injection if a malicious user provides input designed to break out of the command string (e.g., using semicolons or backticks).\n
- Ingestion points: User input containing dates, times, or relative temporal phrases (referenced in SKILL.md).\n
- Boundary markers: None specified for the shell command interpolation.\n
- Capability inventory: Uses the Bash tool to execute system commands, including variable assignment and arithmetic (SKILL.md, references/reference.md).\n
- Sanitization: No sanitization or escaping of the user-provided string is mentioned; the skill only suggests removing the word 'in' before passing the string to the command.
Audit Metadata