recall
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script located at
scripts/graph-auditto validate the integrity of thequeue.mdfile. It also utilizes system search utilities such asrg(ripgrep) orgrepto perform keyword searches across the file system. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from markdown files within the
wiki/andhub/directories to synthesize answers for the user. - Ingestion points: The skill reads
index.md, various files inwiki/folders, andhub/section files as its primary data sources. - Boundary markers: The instructions require the agent to "quote the exact supporting passage" and "cite the exact file," which serves as a logical constraint, though no explicit technical delimiters are defined for the data interpolation.
- Capability inventory: The agent can read files, append synthesized notes to
queue.md, and execute thescripts/graph-auditvalidation script. - Sanitization: The skill mandates running
scripts/graph-auditon thequeue.mdfile to detect and fix violations before any new entry is considered durable.
Audit Metadata