show-me
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use a system command to open generated HTML artifacts for the user.
- Evidence: The instruction
Bash(open path/to/show-me-{description}.html)in SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill ingests the current topic of conversation to generate HTML infographics and diagrams, which are then opened via system commands, creating a surface for executing malicious content.
- Ingestion points: The conversation context is used to determine the content of visual artifacts (SKILL.md).
- Boundary markers: The skill does not provide instructions to delimit or ignore instructions embedded within the conversation data.
- Capability inventory: The agent has the capability to generate HTML files and execute a bash command to open them.
- Sanitization: There is no evidence of sanitization or escaping of conversation content before it is interpolated into the HTML artifacts.
Audit Metadata