rhdh-context
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The CLI logic in
rhdh/cli.pyandrhdh/config.pyusessubprocess.runto interact with system tools such asgit,gh,podman,docker, andaclifor environment diagnostics and repository management. - [DYNAMIC_EXECUTION]: The
rhdh localcommand inrhdh/cli.pyresolves the path to an externalrhdh-localexecutable at runtime and executes it, delegating arguments to this standalone tool. - [INDIRECT_PROMPT_INJECTION]: The skill manages and displays content from
TODO.mdandworklog.jsonlfiles. If these files are populated with malicious instructions from external sources (e.g., via a git commit or automated tool), they could influence the agent when displayed. - Ingestion points: The skill reads
TODO.md(rhdh/todo.py) andworklog.jsonl(rhdh/worklog.py). - Boundary markers: None detected for these markdown/JSONL files.
- Capability inventory: The skill can execute shell commands via
subprocess.runfor git and other tools. - Sanitization: The raw content of todos is printed to the agent context without specific sanitization of embedded instructions.
Audit Metadata