resilient-working-directory
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to executels -1, which is a standard command for listing files in the current working directory. The command is static and does not involve user-supplied arguments. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of local filenames during the execution of the
lscommand. However, the risk is mitigated as the output is placed within fenced code blocks for display and is not used to trigger further high-privilege tool calls or logic chains.
Audit Metadata