review-environments
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the vendor's own CLI tool, specifically
prime env installandprime eval run. These commands are used to verify the functionality of environment modules being reviewed. - [INDIRECT_PROMPT_INJECTION]: The skill represents a data ingestion surface as it audits external environments sourced from local paths or a remote Hub.
- Ingestion points: Environment modules are loaded from
./environments/or pulled from a remote Hub viaprime env pull. - Boundary markers: No explicit instructions or delimiters are provided to the agent to treat the environment code as untrusted data during the analysis phase.
- Capability inventory: The skill has the capability to execute code from the environment through the
prime eval runcommand. - Sanitization: There is no automated sanitization of the environment code before it is analyzed or executed.
Audit Metadata