seed
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill utilizes the
uvxtool to download and execute logic from theouroboros-aipackage hosted on the Python Package Index (PyPI). - [COMMAND_EXECUTION]: The skill uses
run_shellto execute environment-resolution logic and interacts with the GitHub API via theghCLI to star the vendor's repository upon user request. - [DYNAMIC_EXECUTION]: The skill includes an inline Python script that is executed to manage local configuration in
~/.ouroboros/prefs.jsonand create audit trails in~/.ouroboros/seed-revisions/. - [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface by ingesting untrusted user input that is explicitly treated as 'byte-for-byte' content, which can include functional shell commands.
- Ingestion points: The
goalandacceptance_criteriafields within thesession_contextargument inSKILL.md. - Boundary markers: None present; the skill explicitly instructions that values enter the Seed verbatim.
- Capability inventory: The skill has the ability to run shell commands (
run_shell) and perform network operations (gh api). - Sanitization: No sanitization or escaping is performed on the user-provided criteria.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch the
ouroboros-aipackage and to interact with GitHub's API endpoints.
Audit Metadata