dream-studio
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines shell commands for log management in Stage 5, specifically using
mkdir -pandmvto rotatelog.mdinto a dated archive folder. These commands use variables (e.g.,$VAULTand date-based placeholders) that may be influenced by external input. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it ingests and processes untrusted user data to drive automated actions and generate file content.
- Ingestion points: The skill reads from
memorbs/log.md,memorbs/HQ/OrbTrack/, andDaily Notes/to gather data for analysis (SKILL.md, Stage 2). - Boundary markers: There are no explicit boundary markers or directives defined to prevent the agent from following instructions potentially embedded within the ingested log files.
- Capability inventory: The skill has the capability to write to
memorbs/HQ/Core/,memorbs/HQ/Belief/, and edit000-MOC.mdfiles, alongside shell execution for file rotation (SKILL.md, Stage 5). - Sanitization: The instructions do not specify any sanitization or validation logic for content extracted from user logs before it is used to construct filenames (slugs) or shell command arguments.
Audit Metadata