subsystem-compile
Fail
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: HIGHCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Command injection vulnerability in
scripts/subsystem-compile.pyviaos.system(). - Evidence: The script constructs a shell command string using user-controlled data from the JSON
namefield:os.system(f'powershell.exe ... -SubsystemPath "{target_xml}"'). A malicious payload in the JSON name (e.g.,"test"; calc; #) can escape the path quoting and execute arbitrary commands when the validation step runs. - [COMMAND_EXECUTION]: The PowerShell version
scripts/subsystem-compile.ps1also performs dynamic execution of a validation script. While it uses the call operator, it similarly interpolates the user-derivedtargetXmlpath as a command argument. - [SAFE]: The homoglyph detection in
SKILL.mdis a false positive. The character 'С' in '1С' is the standard Cyrillic character used in the name of the 1C:Enterprise software suite.
Recommendations
- AI detected serious security threats
Audit Metadata