go
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local script named
db.mjsto manage run records and concurrency leases. This utility is used for operational logging and ensuring tasks do not run simultaneously. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an ingestion point for external data through the
refresh-backlogstep, which processes 'new inbound' information. - Ingestion points: New inbound data is processed in
SKILL.mdvia therefresh-backloginvocation. - Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from following directives embedded within the ingested data.
- Capability inventory: The agent can execute the
db.mjsscript and trigger follow-up actions likeact-post-decisionas described inSKILL.md. - Sanitization: There is no evidence of data sanitization or validation performed on the external content before it is passed to subsequent steps.
Audit Metadata