show-me
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for the agent to execute shell commands using the
openutility to display generated HTML files. - Evidence: Found in
SKILL.mdinstruction:Bash(open path/to/show-me-{description}.html). - [INDIRECT_PROMPT_INJECTION]: The skill acts as an ingestion surface for untrusted data from the conversation history.
- Ingestion points: Conversation history and the "current topic" referenced in
SKILL.md. - Boundary markers: Absent. The instructions do not specify any delimiters to separate user data from agent instructions when generating the artifacts.
- Capability inventory: Command execution via the
Bash()tool mentioned inSKILL.md. - Sanitization: Absent. There is no instruction to sanitize or validate the data used to populate the
{description}placeholder in the command string, potentially allowing for command argument manipulation.
Audit Metadata