file-organizer
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
ls,find,du,mkdir, andmvto analyze file structures and perform organization tasks. The use of these tools is aligned with the skill's stated purpose of managing the local file system. - [INDIRECT_PROMPT_INJECTION]: The skill identifies organization patterns based on file names and metadata, creating a surface for indirect prompt injection if a directory contains maliciously named files.
- Ingestion points: File names and types are ingested via
lsandfindcommands inSKILL.md(Step 2). - Boundary markers: The skill employs a structured 'Organization Plan' (Step 5) to verify changes with the user, which serves as a manual boundary to mitigate automated obedience.
- Capability inventory: The skill utilizes
mkdir,mv, and deletion instructions found inSKILL.md(Step 6) to modify the file system. - Sanitization: No specific sanitization or escaping of file names is mentioned in the instructions when processing directory contents.
Audit Metadata