stash-override-rules
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies shell commands such as
curl,dig, anddocker pullfor use in validating the networking behavior and accessibility of generated configurations. - [INDIRECT_PROMPT_INJECTION]: The skill processes remote data fetched via
curl, which creates an ingestion point for potentially untrusted content. 1. Ingestion points: Remote JavaScript and YAML files are fetched from URLs provided or generated during the workflow. 2. Boundary markers: No explicit markers are used to delimit the external content within the agent's context. 3. Capability inventory: The agent can execute networking and system commands (curl,dig,docker) if terminal access is provided. 4. Sanitization: While output is truncated usingsed, there is no logical sanitization to prevent the content from containing instructions that might influence the agent's subsequent behavior.
Audit Metadata