tar-compression
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for extracting various archive formats (tar, gzip, xz, etc.) which is a common vector for directory traversal or 'tar bomb' attacks if the agent processes untrusted files.
- Ingestion points: Extraction commands in
SKILL.mdsuch astar -xvf,gunzip, andunxzthat process external archive files. - Boundary markers: Absent; instructions do not include warnings or delimiters to ignore instructions potentially embedded within archives.
- Capability inventory: The skill utilizes shell-based archiving tools (
tar,gzip,bzip2,xz,zstd), network communication viassh, and database backup utilities (mysqldump,pg_dump). - Sanitization: Absent; no validation or integrity check steps are mandated before extracting archive contents.
Audit Metadata