code-transfer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/line_insert.pyvia the command line to perform precise code insertions at specific line numbers. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to move code between files, which involves reading untrusted content and writing it to other locations on the filesystem.
- Ingestion points: The
codeargument passed toline_insert.pyand content handled byReadandEdittools. - Boundary markers: None implemented; the skill relies on the agent's context for delimitation.
- Capability inventory: The skill has the ability to read, write, and grep files, as well as execute local scripts.
- Sanitization: The
line_insert.pyscript includes validation to prevent directory traversal by checking for..in file paths and resolving absolute paths. - [DYNAMIC_EXECUTION]: The skill documentation describes an "Execution Mode" for batch operations involving the execution of Python code that interacts with internal agent APIs (
api.filesystem,api.code_analysis).
Audit Metadata