refine-file
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes the content of user-specified files, serving as an ingestion point for untrusted data that could attempt to influence the agent's behavior. 1. Ingestion points: The target file loaded in Step 0. 2. Boundary markers: Absent; there are no explicit instructions to the agent to disregard instructions found within the audited content. 3. Capability inventory: The skill can invoke sub-skills (Step 1) and modify files through MOVE and SHAPE operations (Step 2 and 3). 4. Sanitization: No sanitization or filtering of the input file content is performed before the audit logic is applied.
- [COMMAND_EXECUTION]: The skill facilitates filesystem modifications through MOVE and SHAPE actions. These operations allow the agent to edit the source file or a canonical target based on the analysis of the ingested data.
Audit Metadata