bat-cat
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and display external file contents, which provides an entry point for untrusted data that could contain malicious instructions meant to influence the agent.
- Ingestion points: Reads local file content through the
batcommand (SKILL.md). - Boundary markers: The skill does not provide instructions to wrap file output in delimiters or warn the agent to ignore instructions found within the data.
- Capability inventory: The skill executes shell commands using the
batbinary and interacts with the file system (SKILL.md). - Sanitization: No sanitization or filtering of the file contents is performed before the data is presented to the agent.
Audit Metadata