create-context-file
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The shell script
scripts/create-context-file.shis vulnerable to YAML frontmatter injection. It interpolates user-controlled strings (such as the--titleargument) directly into a YAML block using double quotes but performs no escaping of internal quote characters or newlines. This allows an attacker or malformed data to inject additional YAML fields or break the metadata structure of the created context files. - Ingestion points: Command-line arguments (e.g.,
--title,--tags) inscripts/create-context-file.sh. - Boundary markers: Absent; the script uses double quotes to wrap the title but does not validate or escape the content within them.
- Capability inventory: The script has file-write capabilities, using
printfand shell redirection to create files in the.context/directory. - Sanitization: Absent; the script does not sanitize the title or other strings before embedding them in the frontmatter string.
- [COMMAND_EXECUTION]: The skill includes and executes a local shell script (
scripts/create-context-file.sh) to perform file system operations. These operations (creating directories and writing files) are benign and aligned with the skill's stated purpose, but they represent a functional attack surface for input manipulation.
Audit Metadata