plantuml-ascii
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's installation instructions include the use of
sudo apt-get install, which involves executing commands with administrative privileges. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch the PlantUML JAR file from GitHub, which is a well-known service for hosting software releases.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform system-level operations, including installing software viabrew,apt-get, andyum, as well as executing the PlantUML tool viajavaor direct binary calls. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided PlantUML diagram definitions to generate ASCII art, creating a surface for potential injection through malformed data.
- Ingestion points: Reads
.pumlfiles containing diagram definitions. - Boundary markers: None identified in the provided instructions.
- Capability inventory: File reading and writing, and arbitrary command execution via Bash.
- Sanitization: No input validation or sanitization of the PlantUML source code is specified.
Recommendations
- AI detected serious security threats
Audit Metadata