logic-review

Warn

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to check for language runtimes by executing shell commands such as python3 --version, node --version, and go version in the 'Execution Verification Gate' (Step 8 of the guide).
  • [REMOTE_CODE_EXECUTION]: The skill directs the agent to generate and locally execute 'reproducer scripts' based on user-provided code. This capability involves dynamic execution of code derived from untrusted input, which is a significant attack vector, even with instructions to limit side effects to pure computation.
  • [PROMPT_INJECTION]: The skill operates by ingesting and analyzing code snippets provided by users. This ingestion point is susceptible to indirect prompt injection, where a user could embed instructions within the code to manipulate the agent's behavior during the review or verification process.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 31, 2026, 04:35 PM
Security Audit — agent-trust-hub — logic-review