competitive
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts
scripts/run-state-check.jsandscripts/evidence-log.shusingnodeandbashto perform its primary logging and state management functions. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting external competitor data (quotes, claims) and using it as arguments in a shell script execution.
- Ingestion points: External competitor quotes and source URLs processed at runtime as described in SKILL.md.
- Boundary markers: Prompt instructions specify using single quotes to wrap argument values in the
evidence-log.shcommand. - Capability inventory: Shell command execution via
bash. - Sanitization: The skill relies on prompt-level single quoting for data separation; there is no evidence of programmatic escaping or validation of the input strings before they are passed to the shell.
Audit Metadata