compress
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
claudeCLI tool usingsubprocess.runinscripts/compress.pyto perform text compression tasks when the SDK is not present. - [DATA_EXFILTRATION]: Natural language content is sent to the Anthropic API. The skill implements a security denylist in
scripts/compress.py(is_sensitive_path) to skip files matching patterns like.env,id_rsa, or directories like.sshto prevent accidental data exposure. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external memory files, creating a surface for injection. Mandatory evidence: (1) Ingestion points:
scripts/compress.pyreads file content usingPath.read_text; (2) Boundary markers: Prompts inscripts/compress.pylack explicit delimiters or instructions to ignore embedded commands; (3) Capability inventory: Skill usessubprocess.runfor commands andPath.write_textfor file modification; (4) Sanitization: Heuristic path-based filtering (is_sensitive_path) is present but does not sanitize content. - [DYNAMIC_EXECUTION]: The script uses Python's
subprocessmodule to dynamically invoke external system tools for model interaction.
Audit Metadata