show-me
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
opencommand viaBashto display generated HTML artifacts. This is a functional requirement for the skill's visualization purpose. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting untrusted user conversation data to generate visualizations and filenames.
- Ingestion points: The skill processes the current topic of conversation to create visual aids.
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: The skill utilizes
Bash(open ...)to view generated files. - Sanitization: The instructions do not specify sanitization for the user-provided description variable used in filenames or command execution.
Audit Metadata