shell-script

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No attempts to override agent safety guidelines, bypass constraints, or extract system prompts were detected. The instructions are strictly focused on technical assistance for shell scripting.
  • [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file path access (such as SSH keys or AWS configs), or network exfiltration patterns was found. The provided script templates use local temporary paths for logging and do not communicate with external servers.
  • [REMOTE_CODE_EXECUTION]: The skill provides code templates for the user to copy and use. It does not automate the download or execution of remote scripts. References to dependencies like jq or curl are presented as informational requirements for the user to manage.
  • [OBFUSCATION]: The content is clear and uses standard Markdown and Bash syntax. No Base64 encoding, zero-width characters, or homoglyph-based attacks were identified.
  • [COMMAND_EXECUTION]: While the skill assists with writing commands, it does not include instructions for the agent to execute arbitrary or dangerous commands on the host system without user oversight.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize the load-time execution syntax (!command) or any other silent execution mechanisms.
  • [INDIRECT_PROMPT_INJECTION]: As a code-generation assistant, the skill handles user requirements to produce scripts. It mitigates potential risks by explicitly instructing the agent to emphasize security practices like variable quoting to prevent shell injection in the generated output.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 09:49 PM