find-complaints
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell script (scripts/evidence-log.sh) with arguments derived from untrusted external content. The use of single quotes in the instruction bash scripts/evidence-log.sh '' '' is an insufficient security measure to prevent command injection if the ingested quote itself contains single quotes or other shell metacharacters.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing untrusted content from various external sources such as Reddit, G2, and GitHub issues.\n
- Ingestion points: Search results from G2, Capterra, Trustpilot, App Store, Google Play, Reddit, Hacker News, and GitHub issues.\n
- Boundary markers: None identified; the skill does not instruct the agent to use delimiters or ignore instructions within the quotes.\n
- Capability inventory: Execution of scripts (node scripts/run-state-check.js and bash scripts/evidence-log.sh).\n
- Sanitization: No sanitization, escaping, or validation of the external content is performed before it is passed to the logging script.
Audit Metadata