file-intel

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a Python script (scripts/process_files_with_gemini.py) and uses the open command to interact with the file system. These actions take user-provided directory paths as arguments.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection due to its core functionality of ingesting and summarizing untrusted external data.
  • Ingestion points: The skill reads content from a wide range of file formats (PDF, DOCX, CSV, HTML, code files, etc.) within user-specified folders via the scripts/process_files_with_gemini.py script.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are mentioned for the processing of file content.
  • Capability inventory: The skill possesses file system read/write capabilities and shell command execution (python, open).
  • Sanitization: The skill description does not describe any sanitization or filtering of the content extracted from the files before it is passed to the Gemini model or compiled into the MASTER_SUMMARY.md file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:11 PM