standing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of local Node.js scripts to manage the communication bridge and monitor the channel.\n
- Evidence:
SKILL.mdinstructs the agent to runnode ~/.iskron-bridge/iskron-bridge.mjs doctorfor diagnostics andnode ~/.iskron-bridge/iskron-bridge.mjs updatefor updates.\n - Evidence:
references/channel-2.mdspecifies the use ofwatchdog.mjsandwatchdog-exit.mjsscripts to monitor the WebSocket connection.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process messages from external agents and users, which creates a potential vector for indirect prompt injection.\n - Ingestion points: Incoming data frames received through the WebSocket connection (monitored by
watchdogscripts) and history logs retrieved viaiskron_case(action=\"history\").\n - Boundary markers: Uses the
[iskron-bridge]prefix to identify relevant tool responses.\n - Capability inventory: The skill can interact with the vendor's graph via
iskron_case, manage session state withiskron_stand, and execute local bridge management scripts.\n - Sanitization: There are no explicit instructions for sanitizing or escaping the content of incoming messages before they are processed by the agent.\n- [DYNAMIC_EXECUTION]: The skill dynamically generates command lines for local monitoring scripts based on parameters received from the bridge service.\n
- Evidence: The agent is instructed to use commands, keys, and language flags provided in the
connectresponse to launch the watchdog processes.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and update of the vendor's bridge software from its own infrastructure.\n - Evidence: The
establish-mcptool is used to install the bridge, andiskron-bridge.mjs updateis used for software updates.
Audit Metadata