bash-linux

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides documentation for executing various Linux/macOS system commands and standard shell scripting patterns, including process management and file operations.
  • [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection due to the handling of external data files.
  • Ingestion points: Patterns using cat, grep, awk, and read in SKILL.md process external file content into the agent's context.
  • Boundary markers: The provided patterns do not include delimiters or specific instructions to ignore embedded commands within processed data.
  • Capability inventory: The skill is scoped to use the Bash tool and includes commands for network interaction (curl), file system modification, and process control.
  • Sanitization: There are no instructions for sanitizing or escaping content retrieved from external files before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:22 PM
Security Audit — agent-trust-hub — bash-linux