analyze-comparison-tests

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Indirect Prompt Injection Surface: The skill is designed to ingest and interpret agent trajectories, which include user prompts and tool outputs from previous sessions. This creates a surface where instructions embedded within that data could potentially influence the analyzing agent's behavior. Ingestion points: Markdown files containing test trajectories (agent-metadata-*.md). Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded commands within the artifacts. Capability inventory: The agent is capable of executing shell commands via npm. Sanitization: No specific sanitization or filtering of the artifact content is described.
  • Command Line Execution: The skill involves running npm commands with parameters provided by the user. While this is a standard practice for development-oriented tools, it represents a point where local system interaction occurs based on external input.
  • External Resource Retrieval: The artifact collection process involves downloading data from external test environments. Users should ensure that the sources of these artifacts are verified and secure.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 07:42 PM
Security Audit — agent-trust-hub — analyze-comparison-tests