Skills
Navigate
skills/sahiixx/moltworker/file-utils/Gen Agent Trust Hub

file-utils

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill enables an agent to read arbitrary file data which could contain malicious prompts.\n
  • Ingestion points: File reading and searching occur in scripts/read.js and scripts/search.js.\n
  • Boundary markers: Absent; the agent is not warned about the source of the data.\n
  • Capability inventory: Includes scripts/write.js for file modification and scripts/list.js for discovery.\n
  • Sanitization: Content is passed directly to the agent without escaping or validation.\n- [COMMAND_EXECUTION]: The skill provides tools for filesystem modification.\n
  • Evidence: scripts/write.js allows for writing file content and creating directories using fs.writeFileSync and fs.mkdirSync based on user-supplied paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 04:57 PM