audit-reference-originality
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/build_evidence_inventory.pyusessubprocess.check_output()to executegitcommands for analyzing historical file matches and Git blobs. This is a core part of the audit functionality. The execution uses list-based arguments rather than a raw shell string, which significantly reduces the risk of command injection.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from the website being audited and the reference materials. Adversarial instructions embedded in these files could attempt to manipulate the agent's audit findings or verdict.\n - Ingestion points: Site root and reference files processed by
scripts/build_evidence_inventory.pyand inspected by the agent.\n - Boundary markers: The
SKILL.mdincludes explicit instructions to 'Preserve the audit boundary' and to treat the audit as an 'evidence exercise, not a vibe check.'\n - Capability inventory: File system read access, Git command execution, and JSON output generation.\n
- Sanitization: No specific sanitization or filtering of external content for potential instructions is performed before processing.
Audit Metadata