radar-bootstrap
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
radarcommand-line tool (radar map,radar check) to prepare the repository. It includes safety checks to ensure the tool is available before proceeding and explicitly prohibits the agent from attempting to install dependencies itself. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local file system, which constitutes a potential attack surface if repository files contain malicious instructions.
- Ingestion points: The
radar mapandradar checkcommands scan the files within the current repository. - Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from following instructions embedded in the analyzed code or the tool's output.
- Capability inventory: The skill leverages the agent's ability to execute shell commands and read file system contents.
- Sanitization: The skill does not specify any sanitization or filtering of the output from
radar checkbefore it is reported to the user.
Audit Metadata