summarize
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the shell command
date +%Y-%m-%dto determine the current date for file naming purposes. - [EXTERNAL_DOWNLOADS]: The skill retrieves content from external URLs provided by the user using a web fetching tool.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing untrusted content from files and web pages.
- Ingestion points: Step 1 explicitly directs the agent to read local file contents and fetch data from arbitrary URLs.
- Boundary markers: The instructions do not define delimiters (e.g., XML tags or triple quotes) or specific guardrail instructions to ignore commands embedded within the summarized content.
- Capability inventory: The skill has the ability to read and write files to the local file system and perform network operations via a fetching tool.
- Sanitization: There is no evidence of content validation, escaping, or filtering for the external data being processed.
Audit Metadata