skill-quality-auditor
Warn
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/ml-pattern-detection.shemploys theevalcommand to dynamically load variables from temporary feature files (structural_features.txt,content_features.txt,quality_features.txt). These files are populated by piping outputs fromgrep,wc, andawk. While the analysis logic currently generates numeric counts, the use ofevalon data derived from external files is an insecure practice that could lead to command injection if the analysis output is ever compromised. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from other skills'
SKILL.mdfiles for scoring and similarity analysis. - Ingestion points: Content is ingested into the agent context via
scripts/evaluate.sh,scripts/detect-duplication-enhanced.sh,scripts/semantic-analysis.sh, andscripts/ml-pattern-detection.sh. - Boundary markers: Absent; the tool reads and processes raw markdown files directly.
- Capability inventory: The skill can read local files, write reports to the
.context/directory, and execute shell utilities likegrep,sed,awk, andjq. - Sanitization: Absent; there is no filtering or escaping of the ingested markdown content before it is processed by shell scripts.
Audit Metadata