smlib-kernel-operations
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data for diagnosis, creating a surface for potential indirect prompt injection attacks through processed logs and error messages.
- Ingestion points: Processes untrusted diagnostic data including
RuntimeErrormessages,Kernel tracelogs, and symbolicSM_ERR_*status codes extracted from user-provided failures in the environment. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are provided for the error log processing steps.
- Capability inventory: Possesses capabilities to read local documentation, inspect source code, and execute local validation tools like
suggest_tests.py. - Sanitization: No explicit sanitization or filtering of the diagnostic content is specified before analysis.
- [COMMAND_EXECUTION]: The skill instructs the agent to run local development and validation scripts, which involves executing shell commands.
- Evidence: Recommends running
python3 tools/agent/suggest_tests.py --paths <changed paths...>for validation and using theusd-brep-test-selectionutility. These are standard operations for a developer-oriented skill within the project's own repository structure.
Audit Metadata