code-refactor

Warn

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTION

Full Analysis

[DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax (!) in the SKILL.md file to execute a shell command (echo "$1") whenever the skill is loaded.
The $1 parameter is an unvalidated user-supplied argument intended to represent a file path. An attacker could craft a malicious input containing shell metacharacters (such as ;, |, or backticks) to trigger arbitrary command execution on the host system during the skill's initialization phase.

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 25, 2026, 07:59 PM