difficulty-calibration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script (
larch.sh) using the Bash tool. It passes user-supplied arguments directly as flags to the CLI command, which is a standard pattern for diagnostic tools but requires the agent to handle argument safely. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data from multiple sources including JSON, TSV, and JSONL files.
- Ingestion points: The analyzer joins data from
difficulty-rating.json,findings-classification.tsv,review-findings-full.jsonl,review-findings.ndjson, andrejected-analysis/verdicts.tsvfound in the repository. - Boundary markers: There are no explicit instructions or delimiters mentioned to separate or ignore instructions that might be embedded within the logs or artifacts being analyzed.
- Capability inventory: The skill utilizes the
Bashtool to execute a script and theReadtool to access files. - Sanitization: No explicit sanitization or validation of the input log content is described before the output is relayed to the user.
- Ingestion points: The analyzer joins data from
Audit Metadata