walkmethrough
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and executes shell commands from the project configuration (e.g.,
package.jsonscripts) to start servers and run migrations. It also manages background processes to capture and monitor system logs. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to its interaction with untrusted data from the local environment.
- Ingestion points: In
SKILL.md, the agent is tasked with reading git diffs, application log streams via shell output, and database query results. - Boundary markers: The instructions do not define boundary markers or 'ignore' protocols for the data ingested from logs, code, or database records.
- Capability inventory: As described in
SKILL.md, the agent can execute shell commands, maintain background processes, and perform database operations. - Sanitization: There is no evidence of data sanitization or validation for the content retrieved from external logs or database tables before it is processed by the agent.
Audit Metadata