ask-copilot
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
copilotCLI tool via shell commands. It provides clear guidance and code examples to prevent shell injection, such as using quoted variables and avoiding the interpolation of untrusted input directly into shell source.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local repository files and incorporates responses from an external AI service. - Ingestion points: Local file content read via
sedin SKILL.md. - Boundary markers: Use of shell quoting and formatted strings to separate instructions from data.
- Capability inventory: Shell execution of the
copilotbinary and file reading viased. - Sanitization: The instructions explicitly require the agent to obtain user consent before sending data and recommend redacting sensitive information.
Audit Metadata