lov-help-cmd
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes shell commands based on user intent. Instructions in SKILL.md emphasize using safe quoting for parameters and adhering to the specific syntax of the target operating system (macOS, Linux, or Windows) to prevent injection.
- [DATA_EXFILTRATION]: The script
scripts/profile_store.pymanages local user configuration. It implements a security filter (SENSITIVE_PARTS) that explicitly prevents storing sensitive information such as API keys, tokens, or passwords within the durable profile records. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language input to generate commands. It mitigates injection risks by defining clear execution boundaries and requiring the agent to use only host-provided capabilities while checking official documentation for tool verification.
- [DYNAMIC_EXECUTION]: The skill involves dynamic command assembly. Safety is ensured through workflow steps that require confirming destructive operations and verifying tool availability and status before execution.
Audit Metadata