file-intel
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python script (
scripts/process_files_with_gemini.py) and uses theopencommand to interact with the file system. These actions take user-provided directory paths as arguments. - [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection due to its core functionality of ingesting and summarizing untrusted external data.
- Ingestion points: The skill reads content from a wide range of file formats (PDF, DOCX, CSV, HTML, code files, etc.) within user-specified folders via the
scripts/process_files_with_gemini.pyscript. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are mentioned for the processing of file content.
- Capability inventory: The skill possesses file system read/write capabilities and shell command execution (
python,open). - Sanitization: The skill description does not describe any sanitization or filtering of the content extracted from the files before it is passed to the Gemini model or compiled into the
MASTER_SUMMARY.mdfile.
Audit Metadata