file-search

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions and examples for executing the fd and rg (ripgrep) command-line tools to search the local filesystem.
  • [EXTERNAL_DOWNLOADS]: The skill metadata and manual installation instructions reference the system package manager dnf to install fd-find and ripgrep.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it reads and presents untrusted file names and content to the agent.
  • Ingestion points: File names and file contents are read from the local filesystem using fd and rg (SKILL.md).
  • Boundary markers: No delimiters or ignore instructions are used when displaying file content.
  • Capability inventory: Execution of fd and rg commands via the shell (SKILL.md).
  • Sanitization: No evidence of content sanitization or filtering before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 11:33 AM
Security Audit — agent-trust-hub — file-search