torrent-manager
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of magnet links and torrent files, which can contain embedded instructions in metadata.
- Ingestion points:
urls(magnet links) andtorrent_filesparameters in automation scripts (SKILL.md). - Boundary markers: None present to delimit external content from instructions.
- Capability inventory: File writing (downloads),
torrents_delete, and command execution viabg run(SKILL.md). - Sanitization: No explicit sanitization or validation of torrent metadata is mentioned.
- [DYNAMIC_EXECUTION]: The skill uses
uv runto execute multi-line Python code provided as a string literal andbg runfor background command execution. - Evidence:
uv run --with qbittorrent-api python -c "..."used for status checks and automation (SKILL.md). - [EXTERNAL_DOWNLOADS]: Fetches software binaries and packages from well-known services and official repositories.
- Evidence: Downloads aria2c binaries from GitHub releases and installs packages via Chocolatey and PyPI (SKILL.md).
- [COMMAND_EXECUTION]: Spawns system processes to manage background daemons.
- Evidence: Uses
qbittorrent-noxandaria2c --enable-rpcto start long-running background tasks (SKILL.md).
Audit Metadata