dev-server-port-detection
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
scripts/detect_port.shthat executes standard system utilities such aslsof,netstat, andcurlto identify listening ports onlocalhost. This is a standard procedure for development environments. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by instructing the agent to parse terminal output from build tools which may include untrusted content. (1) Ingestion points: Terminal logs described in
references/port-detection-patterns.md. (2) Boundary markers: Absent. (3) Capability inventory: Shell script execution inscripts/detect_port.sh. (4) Sanitization: Absent for terminal output parsing, though file-based input is filtered for numeric values.
Audit Metadata