company-knowledge
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script to determine the root directory for the company knowledge corpus.
- Evidence:
SKILL.mdcontains an instruction to executesh scripts/resolve-root.shto resolve the environment root. - [PROMPT_INJECTION]: The skill reads and processes external Markdown files from a locally configured directory, which creates a surface for indirect prompt injection.
- Ingestion points: Markdown files located within the directory resolved by the
resolve-root.shscript or theCOMPANY_KNOWLEDGE_ROOTenvironment variable. - Boundary markers: None explicitly defined; there are no instructions to disregard commands or prompts embedded within the external knowledge files.
- Capability inventory: The agent has shell access via the skill's own script and standard file-system operations.
- Sanitization: No sanitization or content validation is performed on the Markdown data ingested from the knowledge base.
Audit Metadata