skills-engineering
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation phase (Phase 7) described in
scripts/generate.shandreferences/eval/phase.mdinstructs the agent to run all bash scripts matchingtests/test-*.shand execute shell commands from theassert_sharray in the target skill's test files. This enables execution of arbitrary shell code defined in external data files. - [PROMPT_INJECTION]: The skill processes untrusted data (target skill files) and provides them to subagents during evaluation. 1. Ingestion points:
SKILL.mdand reference files in the target skill directory. 2. Boundary markers: Absent in subagent prompts for processing target skill content. 3. Capability inventory:Bash,Read,Write,Edit,Grep,Glob,Skilltools. 4. Sanitization: Absent; content is provided directly to subagents.
Audit Metadata