autoresearch
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill runs user-defined shell commands to verify improvements. This behavior is secured by a safety screening protocol that checks for dangerous patterns like recursive deletion, fork bombs, and credential exposure before any command is executed.
- [DATA_EXFILTRATION]: To prevent sensitive data exposure, the skill includes tools for scanning generated documentation for secrets and requires database connection strings to be allowlisted (e.g., restricted to localhost or test environments) before performing migrations.
- [PROMPT_INJECTION]: The skill processes external information through web searches and codebase analysis. It mitigates indirect injection risks by using structured data schemas and isolating agent instances during reasoning tasks to ensure results are based on objective evidence.
- [REMOTE_CODE_EXECUTION]: The orchestrator components include logic to screen all dynamically derived commands, ensuring that the autonomous loop cannot introduce unvetted execution paths.
Audit Metadata