health-check
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3to execute local scripts located in theharness/scripts/directory, specificallyhealth-check.pyandokf-check.py, to perform diagnostic tasks and repository updates. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources and local configuration files, which presents a surface for indirect prompt injection.
- Ingestion points: The
health-check.pyscript fetchesversion.jsonand file fingerprints from a remote branch (e.g.,orca) in theRheinmir/setuprepository. - Boundary markers: None explicitly defined in the skill instructions to separate remote data from the agent's internal logic.
- Capability inventory: The skill has the capability to execute shell commands (
python3,git checkout) and modify local files via the--updateand--migrateflags. - Sanitization: There is no evidence of sanitization or validation of the remote content before it is processed by the local scripts.
Audit Metadata