joelclaw-system-check
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The health check script (
scripts/health.sh) executes numerous system utilities such askubectl,talosctl,git,bun,df, andduto collect diagnostic data. - [COMMAND_EXECUTION]: The skill's documentation provides remediation commands for the agent or user that involve destructive actions, such as
rm -rfandfind ... -delete, specifically targeting temporary files and stale test artifacts within the project directory. - [REMOTE_CODE_EXECUTION]: The diagnostic process involves running
bun testandbunx tsc --noEmit, which executes code present in the local repository packages. - [CREDENTIALS_UNSAFE]: The script accesses local configuration in
~/.talos/configand uses a localsecretsutility to retrieve a keyring password for thegogclitool to verify Google Workspace authentication status. - [EXTERNAL_DOWNLOADS]: The skill performs a
git fetchoperation to check for synchronization status between the local repository and its remote origin. - [PROMPT_INJECTION]: The skill is identified as having an attack surface for indirect prompt injection (Category 8) because it processes and displays output from external tools and local test suites directly into the agent's context.
- Ingestion points: Diagnostic output from
joelclaw,kubectl,git, andbun testinscripts/health.shis ingested by the agent. - Boundary markers: No explicit delimiters or warnings (e.g., "ignore embedded instructions") are present in the script's output formatting.
- Capability inventory: The skill environment possesses capabilities including file deletion, infrastructure management via
kubectl, and package installation viabun. - Sanitization: No sanitization or validation of tool output is performed before presentation to the agent.
Audit Metadata