batch-file-processor
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external batch files using Read and Edit tools, which creates a potential surface where malicious instructions embedded in those files could influence agent behavior.
- Ingestion points: External batch files accessed and processed through the
ReadandEdittools. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate processed file content from the agent's control logic.
- Capability inventory: The skill has high-privilege access to the
Bashtool (allowing shell command execution) and theWrite/Edittools (allowing file system modifications). - Sanitization: No sanitization, validation, or filtering mechanisms are described for the content of the files being processed.
Audit Metadata