re-ai-triage
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard diagnostic commands such as
file,strings,xxd, andpip listto identify file types and environment dependencies. These are routine operations for a reverse engineering triage task. - [INDIRECT_PROMPT_INJECTION]: The skill defines a data ingestion surface where it processes user-provided file paths using diagnostic tools. The output of these tools is used to make routing decisions.
- Ingestion points: User-provided file paths processed in
SKILL.md(Step 1: Input形态识别). - Boundary markers: The instructions do not specify delimiters or warnings to ignore instructions embedded within the analyzed files.
- Capability inventory: The skill uses
file,xxd, andstringsto inspect file content. - Sanitization: There is no mention of escaping or filtering the output of the diagnostic tools before the agent interprets it for triage decisions.
Audit Metadata