close
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run search and filtering operations via /usr/bin/find and /usr/bin/grep. These commands are templated with variables such as directory roots and ISO timestamps provided through user arguments or project-specific configuration files.
- [INDIRECT_PROMPT_INJECTION]: The skill reads Delta lines from child ring files which are processed by the agent to update a parent file, creating a surface for indirect instructions.
- Ingestion points: Step 1 in SKILL.md specifies reading the child ring file from disk.
- Boundary markers: Step 5 instructs the agent to reformulate content in its own terms and explicitly forbids verbatim copies.
- Capability inventory: The skill has access to Read, Write, Edit, and Bash tools.
- Sanitization: Step 2 defines a schema validation process for Delta lines, requiring specific types and valid trace citations.
Audit Metadata