wizard
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill is designed to generate custom bash scripts at runtime by combining a static library with logic authored by the AI.
- Evidence:
SKILL.mddefines a process where the agent authors script "stages" and combines them with a library provided intemplate.shto create a new executable script. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository to determine setup requirements, creating a vector where malicious repository content could influence the AI's generated script logic.
- Ingestion points:
SKILL.mdinstructs the agent to read.env,README,docker-compose*, and.github/workflows/*files from the repository. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are specified when processing these files.
- Capability inventory: Generated scripts have the capability to write to
.envfiles, open URLs in the user's browser, and interact with the GitHub CLI (gh) to set secrets and variables. - Sanitization: No sanitization or validation of ingested file content is performed before logic generation.
- [COMMAND_EXECUTION]: The skill instructs the user to modify file permissions and execute the generated shell scripts.
- Evidence:
SKILL.mdStep 3 explicitly provides the commandchmod +xto make the generated scripts executable by the user.
Audit Metadata