skills/daxaur/openpaw/c-files/Gen Agent Trust Hub

c-files

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill defines standard usage patterns for the rclone utility, a well-known and trusted tool for cloud file synchronization. No evidence of obfuscation or hardcoded credentials was found.
  • [COMMAND_EXECUTION]: Includes commands for listing, copying, syncing, and mounting cloud storage. These operations are intended for user-authorized file management and align with the tool's purpose.
  • [PROMPT_INJECTION]: Evaluated for indirect prompt injection surface as the skill facilitates reading data from external cloud remotes. Ingestion points: 'rclone copy' and 'rclone mount'. Boundary markers: None. Capability inventory: Subprocess execution of file read, write, and mount commands. Sanitization: None. While a vulnerability surface exists for processing untrusted external files, the skill contains no instructions to exploit it.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 08:44 AM
Security Audit — agent-trust-hub — c-files