smart-insightful-friend
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied data in the
user_requestfield to generate summaries and tables, creating a surface for indirect prompt injection. • Ingestion points:src/index.jsprocesses user input via therunfunction. • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used in the template strings. • Capability inventory: Includes logic for text processing and a subprocess execution capability for validation. • Sanitization: The skill implements aguardRequestcheck from a shared library to filter inputs.\n- [COMMAND_EXECUTION]: The scriptscripts/validate_reasoning_artifacts.pyutilizessubprocess.runto execute an external Python utility for artifact verification. The target script path is resolved relative to the skill's location, ensuring it remains within the intended shared resource directory.
Audit Metadata