code-oss-logs

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard system utilities such as ls, tail, find, and rg (ripgrep) to locate and inspect log files within the $HOME/.vscode-oss-dev/logs/ directory. These tools are used appropriately for debugging and diagnostic purposes.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted log data generated by external processes.
  • Ingestion points: Log files located in $HOME/.vscode-oss-dev/logs/ (SKILL.md).
  • Boundary markers: No specific delimiters or safety warnings are provided for the agent when reading log content.
  • Capability inventory: Capabilities are limited to directory listing and file reading via ls, find, tail, and rg. No network access, subprocess spawning, or dynamic code execution tools were detected.
  • Sanitization: No sanitization or filtering of log content is performed prior to reading.
  • [DATA_EXFILTRATION]: No network activity, remote connections, or attempts to transmit local data were identified. All operations are confined to local development logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:46 PM
Security Audit — agent-trust-hub — code-oss-logs