logic-review
Warn
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to check for language runtimes by executing shell commands such as
python3 --version,node --version, andgo versionin the 'Execution Verification Gate' (Step 8 of the guide). - [REMOTE_CODE_EXECUTION]: The skill directs the agent to generate and locally execute 'reproducer scripts' based on user-provided code. This capability involves dynamic execution of code derived from untrusted input, which is a significant attack vector, even with instructions to limit side effects to pure computation.
- [PROMPT_INJECTION]: The skill operates by ingesting and analyzing code snippets provided by users. This ingestion point is susceptible to indirect prompt injection, where a user could embed instructions within the code to manipulate the agent's behavior during the review or verification process.
Audit Metadata