console-tester
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
run.pyscript executes a user-specified runner binary and an ELF file using thesubprocess.Popenfunction. This capability is the core functionality of the skill, used to automate the execution and testing of the game port. - [INDIRECT_PROMPT_INJECTION]: The
triage.pyscript parses log files generated during game execution. These logs are external data sources that could be influenced by the software under test, creating a potential surface for indirect prompt injection if the logs contain adversarial text. - Ingestion points: The
triage.pyscript reads log files from theconsole/runs/directory (e.g.,latest.log). - Boundary markers: The script output does not include explicit instruction-boundary delimiters to signal the agent to ignore instructions embedded in the logs.
- Capability inventory: The skill can execute local binaries (
run.py), read/write project files, and perform incremental builds usingcmake. - Sanitization: The script performs minimal sanitization by escaping markdown pipe characters for table formatting, but it does not filter for potential prompt injection patterns within the log content.
Audit Metadata