knowledge-base-add-book
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided PDF files to generate summaries and diagrams, which is an inherent ingestion point for untrusted data.
- Ingestion points: The
book.pdffile (Step 1, Item 3) used as the primary source for content generation. - Boundary markers: The instructions do not define specific delimiters for the PDF text or provide directives to ignore potential instructions embedded within the source material.
- Capability inventory: The agent has the ability to write to the local filesystem, execute shell commands via
gitandmermaid-render, and push updates to a remote repository. - Sanitization: No explicit sanitization or filtering of the content extracted from the PDF is mandated.
- [COMMAND_EXECUTION]: The skill utilizes specific shell commands to manage the repository and validate generated diagrams.
- Evidence: Commands include
git clone,git push, andmermaid-render /tmp/d.mmd(Steps 0, 2, and 4). - Context: These tools are authorized in the skill's metadata and are employed for expected administrative tasks within the scope of the project.
- [EXTERNAL_DOWNLOADS]: The skill performs a repository clone operation from an external service.
- Evidence:
git clone git@github.com:mmontes11/knowledge-base.git(Locate the knowledge base section). - Context: The repository is the author's own official knowledge base, representing a legitimate vendor resource.
Audit Metadata