enterprise-maven-pom
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Maven
pom.xmlfiles which are untrusted data sources. Maliciously crafted XML content could attempt to influence the agent's logic or probe for vulnerabilities in the processing tools. - Ingestion points:
pom.xmlfiles found viafdfindand read viacatinSKILL.md. - Boundary markers: The skill does not define specific boundaries or "ignore" instructions when processing XML content.
- Capability inventory: The skill utilizes
cat,dasel,fdfind, and shell redirection to write files to/tmp/. - Sanitization: No sanitization or validation of the XML content is performed before processing with
dasel. - [COMMAND_EXECUTION]: The skill employs a shell loop
for pom in $(fdfind ...); do ... doneinSKILL.mdto iterate over files. This pattern is susceptible to command injection if the underlying file system contains filenames with shell metacharacters (e.g.,;, backticks, or dollar-parentheses).
Audit Metadata