configure-axis
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the
run_scriptconfiguration field, which allows the AXIS framework to execute arbitrary shell commands during scenario setup and teardown phases. - [EXTERNAL_DOWNLOADS]: The skill describes capabilities for cloning remote git repositories into a scenario workspace via the
copyaction and fetching agent skills or configuration from GitHub repositories. - [INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface where the framework ingests content from external sources (git repositories, remote skills, and third-party MCP servers).
- Ingestion points: External git repositories via
copy, remote skills via GitHub URLs, and remotemcp_servers. - Boundary markers: The skill specifies that scenarios run in an "isolated workspace."
- Capability inventory: Scenario lifecycle actions include
run_script(shell execution) and configurablemcp_servers(filesystem/tool access). - Sanitization: No explicit sanitization of external content is described within the instruction set.
- [DYNAMIC_EXECUTION]: The framework supports the use of custom
adapters, which are JavaScript or TypeScript modules loaded and executed by the framework at runtime.
Audit Metadata