moos-ivp-docs
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to search for local repositories and process PDF files.
- Evidence in
SKILL.mdandreferences/doc-selection.mdincludes the use offind,rg(ripgrep),grep, andpdftotextfor data extraction. - The skill specifies suppressing permission errors using
2>/dev/nullduring file searches. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation PDFs from
https://oceanai.mit.edu/ivpman/pdfs/. - This domain belongs to the Massachusetts Institute of Technology (MIT) and is the official repository for the software being documented.
- [DATA_EXFILTRATION]: The skill accesses the local environment and file system to locate software checkouts.
- It checks the
MOOS_IVP_ROOTenvironment variable and performs a bounded search in the user's home directory ($HOME). - While this involves reading local file paths, the operations are scoped to finding the
moos-ivpdirectory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external MIT PDFs and local source code files to answer user queries.
- Ingestion points: MIT PDF index (
oceanai.mit.edu/ivpman/pdfs/) and local source files (ivp/src/). - Boundary markers: The skill lacks explicit instructions to ignore instructions embedded within the documentation it reads.
- Capability inventory: Uses
find,rg,grep, andpdftotextto process files and documents. - Sanitization: No evidence of input sanitization or validation for the content extracted from PDFs or source files.
Audit Metadata