interrogate
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run a Python script located within its own directory (
scripts/p2p_filesystem.py) to resolve file paths during operation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external content from project files, which could contain adversarial instructions.
- Ingestion points: The agent reads from
.p2p/work/<slug>/contract.mdand related context files. - Boundary markers: There are no specific delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill is capable of executing shell commands via Python and performing filesystem operations.
- Sanitization: No input validation or sanitization of the ingested text is described in the workflow.
Audit Metadata