snapshot-push
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run a local script
scripts/snapshot-push.shusing the bash interpreter to automate git operations. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates a user-provided
<optional message>into the shell command execution string. 1. Ingestion points: The<optional message>parameter in the shell execution step. 2. Boundary markers: None present to delimit user input from the command structure. 3. Capability inventory: Execution of local scripts and access to the directory/Volumes/giatbhSSD(APFS)/workspace/bonbon-ai. 4. Sanitization: The instructions do not specify any sanitization or escaping for the user input before it is passed to the shell script, creating a potential vector for command injection.
Audit Metadata