life-decision-guide
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage and search for content from the source book.
- Evidence: SKILL.md provides command templates using
git clone,curl,grep, andsedfor fetching and searching the repository's files. - [EXTERNAL_DOWNLOADS]: The skill fetches data from an external GitHub repository belonging to the author.
- Evidence: Instructs the agent to download content from
https://github.com/eternity4719/HowToLiveBetterto access the book's text and configuration files. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from a public repository, creating a potential surface for indirect prompt injection if the source content were compromised.
- Ingestion points: The skill fetches multiple Markdown and HTML files from
github.com/eternity4719/HowToLiveBetterand incorporates their contents into the agent's context. - Boundary markers: The instructions do not specify the use of delimiters or specific security headers when interpolating the fetched content into the response.
- Capability inventory: The agent has access to
git,curl,grep, andsedto interact with the downloaded data. - Sanitization: No sanitization or validation of the fetched content is described before it is processed by the AI.
Audit Metadata