support-edit
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides both PowerShell (
support-edit.ps1) and Python (support-edit.py) implementations to perform metadata modifications. These scripts are invoked locally to update theParentConfigurations.binfile based on user-provided object paths. - [INDIRECT_PROMPT_INJECTION]: The skill reads local XML files to extract object UUIDs. The extracted identifiers are properly escaped using regex escaping functions (
[regex]::Escapein PowerShell andre.escapein Python) before being used in search-and-replace operations, preventing malicious file content from affecting the script's logic. - [EXTERNAL_DOWNLOADS]: The Python implementation utilizes the
lxmllibrary for robust XML parsing.lxmlis a standard, widely-used, and reputable package for this purpose.
Audit Metadata