cut
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python Zip Application (
cut.pyz) located atskills/cut/scripts/cut.pyz. This tool is used for all "gate" operations, including contract resolution, baseline freezing, and evidence issuance. The skill explicitly requires resolving this command as a specific file path to prevent execution of unauthorized binaries from the system PATH. - [DYNAMIC_EXECUTION]: The skill relies on a
.pyzfile, which is an executable archive of Python code. This allows for the execution of complex logic that is bundled with the skill rather than being written directly in the markdown instructions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from specifications and user-provided reproductions to define execution parameters (argv and cwd).
- Ingestion points: External inputs are processed via the
spec_refandreproductionarguments inSKILL.mdandreferences/gate-workflow.mdto generate test plans. - Boundary markers: The instructions do not specify explicit boundary markers (like XML tags or specific delimiters) for the ingested data.
- Capability inventory: The skill possesses the capability to execute arbitrary subprocesses through the
red-gatetool and standard Python test runners (e.g.,pytest,unittest). - Sanitization: The skill mitigates potential injection by requiring that all commands be passed as
argvarrays and strictly forbidding shell evaluation (never shell evaluation).
Audit Metadata