audit-error-handling
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection to execute
cat ~/.claude/skills/audit-workflow.mdwhen the skill is loaded. This shell command automatically injects the contents of a local file into the prompt context; however, this appears to be a benign use of project-specific tooling to import shared workflow logic from a related skill in the author's suite. - [PROMPT_INJECTION]: The skill audits external code files provided at a runtime path, which creates a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Untrusted source code files located at the user-specified
[path](SKILL.md). - Boundary markers: Absent. The skill does not use delimiters or explicit instructions to isolate the audited code from the agent's logic.
- Capability inventory: None. The skill does not define subprocess calls or dangerous tool access within its own instructions.
- Sanitization: Absent. No validation or filtering is applied to the code ingested for auditing.
Audit Metadata