rhdh-context
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The CLI tool utilizes
subprocess.runto execute various local system commands for environment diagnostics. These includegitfor branch and status checks,ghfor GitHub CLI authentication and API access, and container runtimes likepodmanordocker. It also supports a compatibility seam that executes a standalonerhdh-localbinary resolved from the environment or search paths. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external project files. * Ingestion points: Reads repository metadata from
backstage.jsonandsource.json, and processes user-generated content fromTODO.mdandworklog.jsonl. * Boundary markers: Absent; files are read and parsed without explicit delimiters or instructions to ignore embedded commands. * Capability inventory: The skill has broad command execution capabilities viasubprocess.runfor system tools and therhdh-localdelegate. * Sanitization: Content is parsed as JSON or via regex for specific fields, but the resulting values are not sanitized for potential natural language instructions embedded within the files.
Audit Metadata