launch
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external configuration files that could potentially contain malicious instructions.
- Ingestion points: The skill reads YAML, JSON, TOML, and YAML files from the
configs/,recipes/, andexperiments/directories usingcatanddiffcommands. - Capability inventory: The agent has access to file system tools (
ls,cat,find,diff,rm), network monitoring trackers (wandb,neptune,mlflow), and job scheduler commands (scancel). - Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions when reading the contents of these configuration files.
- Sanitization: No sanitization or validation of the content within the configuration files is mentioned before the data is presented to the agent context.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands to verify the environment and manage artifacts.
- Evidence: Commands such as
find,diff,ls, andcatare used to inspect the local filesystem and configuration state. - Evidence: The skill provides instructions for the recursive deletion of directories using
rm -rffor both local and remote (NFS/object store) paths during the cleanup phase. - Evidence: The skill interacts with the SLURM workload manager using the
scancelcommand to terminate job reservations.
Audit Metadata