tailing-build-output
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes terminal logs from build processes, which are external data sources that could be manipulated to include malicious instructions.
- Ingestion points: Terminal log files identified via the
<terminals_folder>/*.txtpattern in SKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to treat log content as data only.
- Capability inventory: The agent is instructed to read and write to source files and execute search commands as described in SKILL.md.
- Sanitization: No sanitization or validation of the log content is performed before the agent acts on the information.
- [COMMAND_EXECUTION]: The skill workflow involves executing shell commands such as
headto explore and identify relevant terminal log files.
Audit Metadata