system-info

Warn

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [METADATA_POISONING]: The skill metadata in SKILL.md identifies 'dspy-skills' as the author, which contradicts the provided author context 'ivanvza'. This discrepancy is misleading regarding the true origin and ownership of the skill.- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays system-level data that can be influenced by local actors, creating a potential vector for indirect prompt injection if the output is processed by an AI agent.
  • Ingestion points: The skill reads process names, command-line arguments, and mount point labels from the /proc filesystem and system APIs.
  • Boundary markers: The scripts output data directly to the console or as JSON without specific delimiters or warnings to help the AI distinguish system data from instructions.
  • Capability inventory: The skill's operations are limited to reading system state and printing to standard output; it lacks network access or file-writing capabilities.
  • Sanitization: No sanitization or escaping is performed on the strings retrieved from the system before they are presented to the agent.- [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of the 'psutil' Python package. While this is a well-known and standard library for system monitoring, it represents an external dependency required for full functionality.- [COMMAND_EXECUTION]: The skill is designed around the execution of Python scripts that interact directly with the operating system's process management and resource monitoring interfaces.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 11, 2026, 11:56 AM