lore-brief
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the lore CLI tool to retrieve system status and synchronization information from the vendor data store. It also includes a utility script that uses shell execution to validate generated output.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it processes untrusted data from an external source.
- Ingestion points: Data is ingested through the lore status command and lore-recall search queries as defined in SKILL.md.
- Boundary markers: The instructions do not specify the use of clear boundary markers or delimiters to isolate retrieved content from the agent instructions.
- Capability inventory: The skill has the capability to execute system commands and run local scripts.
- Sanitization: There is no mention of sanitizing or escaping the retrieved data before it is interpolated into the prompt for synthesis.
Audit Metadata