console-reverse
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill documentation in
reference/pipeline.mdprovides shell commands usingsudo apt-get installto set up the build environment on Linux, which requires elevated administrative privileges.\n- [EXTERNAL_DOWNLOADS]: The skill instructions involve cloning thePS2Recomprepository from GitHub and downloading related tools. These are standard development operations for the skill's domain.\n- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted binary data from local ISO and ELF files, representing a theoretical surface for indirect prompt injection.\n - Ingestion points: Binary data is read from user-provided local files via
iso.pyandelf.py.\n - Boundary markers: The instructions define strict behavioral constraints and a 'Circuit Breaker' mechanism to prevent unsafe automated behavior.\n
- Capability inventory: The agent is authorized to write to the local filesystem and execute shell commands for building software.\n
- Sanitization: The
iso.pyscript includes asafe_componentfunction to validate filenames and prevent path traversal during file extraction.\n- [COMMAND_EXECUTION]: The skill requires the agent to execute various command-line tools for project management, file processing, and software compilation.
Audit Metadata