internal-comms
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFENO_CODECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown documentation and metadata configuration; no executable scripts, binaries, or code files are included.
- [COMMAND_EXECUTION]: The
_meta.jsonfile requests theexectool, providing shell command execution capability. This is unnecessary for a skill dedicated to writing text and violates the principle of least privilege. - [PROMPT_INJECTION]: The instructions direct the agent to load external templates and guidelines, creating an indirect prompt injection surface.
- Ingestion points: Step-by-Step Process and Preparation Checklist in SKILL.md.
- Boundary markers: None specified to delimit external content.
- Capability inventory: The skill requests the
exectool in_meta.json. - Sanitization: No validation or sanitization of external templates is described.
Audit Metadata