file-search
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and examples for executing the
fdandrg(ripgrep) command-line tools to search the local filesystem. - [EXTERNAL_DOWNLOADS]: The skill metadata and manual installation instructions reference the system package manager
dnfto installfd-findandripgrep. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it reads and presents untrusted file names and content to the agent.
- Ingestion points: File names and file contents are read from the local filesystem using
fdandrg(SKILL.md). - Boundary markers: No delimiters or ignore instructions are used when displaying file content.
- Capability inventory: Execution of
fdandrgcommands via the shell (SKILL.md). - Sanitization: No evidence of content sanitization or filtering before it is processed by the agent.
Audit Metadata