ft-research
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a shell script located at a sibling path:
../ft-init/scripts/fast-track-ai-index.sh <target>. This script is used to validate and index the research artifacts created by the agent. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process 'primary sources' and external web content, which are untrusted inputs.
- Ingestion points: External URLs and primary sources retrieved during the research process.
- Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded commands within the retrieved research data.
- Capability inventory: The agent has the capability to write files to the local repository (
fast-track-ai/research/) and execute a local shell script (fast-track-ai-index.sh). - Sanitization: No explicit sanitization, escaping, or validation of the retrieved external content is mentioned before it is processed or written to disk.
Audit Metadata