dse-loop
Warn
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bash(*)to autonomously execute arbitrary programs and scripts defined in the user's task description. It is designed to run these commands in a loop without human intervention for each step. - [COMMAND_EXECUTION]: The workflow involves dynamically writing a Python script (
dse_results/parse_result.py) and executing it to process program outputs. This runtime code generation and execution creates a risk as the logic can be influenced by the data being parsed. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes untrusted content from the project's source code, configuration files, and the standard output/logs of the programs it executes.
- Ingestion points: Project source code (Phase 0, step 2a), log files, and program outputs (Phase 0, step 5; Phase 1, step 3).
- Boundary markers: None identified; untrusted data is directly analyzed by the agent to inform the next iteration's parameters and logic.
- Capability inventory: Full shell access (
Bash(*)), filesystem modification (Write,Edit), and recursive agent calls (Agent). - Sanitization: No evidence of sanitization or filtering of the read content before analysis.
Audit Metadata