invalid-side-effect
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from a target file and uses the
Writetool to modify it, which creates an attack surface where malicious data inside the file could influence agent behavior. - Ingestion points: Target file content is accepted as input.
- Boundary markers: None are specified to delimit input data from instructions.
- Capability inventory: The skill uses the
Writetool for local file system modifications. - Sanitization: No sanitization or validation of input content is defined in the instructions.
- [COMMAND_EXECUTION]: The skill's contract explicitly states that local file writes require no user confirmation, which bypasses a standard security control for file system modifications.
Audit Metadata