wake-on-done
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: During setup, the skill is downloaded from the author's GitHub repository (github.com/eze-is/eze-grokbot). This is a standard installation procedure for this skill.
- [COMMAND_EXECUTION]: The skill is designed to run user-provided shell commands in the background using
nohuportmux. This is the primary function of the tool. - [DATA_EXFILTRATION]: Command results, including exit codes and the last 300 characters of output, are transmitted to a user-configured webhook URL. This data transfer is the intended mechanism for task completion alerts.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the output of external commands, which could potentially contain malicious instructions.
- Ingestion points: Command output is captured and processed in
scripts/notify-run. - Boundary markers: Both
SKILL.mdand the relay bot's prompt inreferences/setup.mdexplicitly state that notice fields are to be treated as data and never as instructions. - Capability inventory: The skill has access to network tools (
curl) and shell command execution. - Sanitization: The skill relies on natural language instructions to the agent to enforce boundaries between data and instructions.
Audit Metadata