interface-validate

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local PowerShell and Python scripts to perform structural and format validation on XML files.
  • [DATA_EXFILTRATION]: The tool includes a parameter to write the validation report to a local file path specified by the user.
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface: The skill ingests untrusted XML content.
  • Ingestion points: scripts/interface-validate.ps1 and scripts/interface-validate.py read content from user-provided file paths.
  • Boundary markers: Absent; the report output does not delimit processed data from validation instructions.
  • Capability inventory: PowerShell and Python script execution, local file system read/write.
  • Sanitization: Absent; the scripts do not escape or filter XML node content before including it in the validation report.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 11:10 AM
Security Audit — agent-trust-hub — interface-validate