majal
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
majalCLI tool to perform various data processing tasks, includingscan,stats,fix, andsampleon user-provided local files. - [PROMPT_INJECTION]: The skill processes Arabic training datasets (
data.jsonl) which are untrusted external inputs. This presents an indirect prompt injection surface where malicious instructions embedded in the data could attempt to influence the agent's behavior during analysis or repair. - Ingestion points: The skill ingests data from
.jsonlfiles as seen in the command examples inSKILL.md. - Boundary markers: There are no explicit boundary markers or system instructions provided to ensure the agent ignores embedded instructions within the processed data.
- Capability inventory: The skill executes shell commands (
majal) on the target files, allowing it to read and modify the content. - Sanitization: The instructions do not specify any sanitization, filtering, or validation steps for the content of the training data before it is processed.
Audit Metadata