ai-automation-workflows
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of Bash scripts to orchestrate AI tasks, utilizing the vendor-provided
infshCLI tool. It also provides examples for modifying system cron jobs to establish scheduled automation cycles. - [EXTERNAL_DOWNLOADS]: Contains instructions to download and install supplementary skills from the vendor's repository using the
npx skills addcommand. These resources are hosted within the vendor's own namespace. - [PROMPT_INJECTION]: The 'Data Processing Pipeline' example demonstrates a pattern susceptible to indirect prompt injection. By using
$(cat $file)to interpolate raw file content directly into an LLM prompt without delimiters or sanitization, the agent may inadvertently follow instructions contained within the processed data files. - Ingestion points:
data_processing.shreads local data from the./data/rawdirectory. - Boundary markers: Absent; data is appended directly to the prompt string.
- Capability inventory: Executes external AI models via the
infshCLI. - Sanitization: No escaping or validation is performed on the file content before processing.
Audit Metadata