code-oss-logs
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities such as
ls,tail,find, andrg(ripgrep) to locate and inspect log files within the$HOME/.vscode-oss-dev/logs/directory. These tools are used appropriately for debugging and diagnostic purposes. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted log data generated by external processes.
- Ingestion points: Log files located in
$HOME/.vscode-oss-dev/logs/(SKILL.md). - Boundary markers: No specific delimiters or safety warnings are provided for the agent when reading log content.
- Capability inventory: Capabilities are limited to directory listing and file reading via
ls,find,tail, andrg. No network access, subprocess spawning, or dynamic code execution tools were detected. - Sanitization: No sanitization or filtering of log content is performed prior to reading.
- [DATA_EXFILTRATION]: No network activity, remote connections, or attempts to transmit local data were identified. All operations are confined to local development logs.
Audit Metadata