ui-lint
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell command templates (using
grep) that incorporate user input from the$ARGUMENTSvariable. If the agent executes these commands without sanitizing the input path, it could lead to command injection (e.g., a file path containing; rm -rf /). - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes content from untrusted external files.
- Ingestion points: Files targeted via the
$ARGUMENTSvariable (SKILL.md). - Boundary markers: None present; the skill does not use delimiters or instructions to ignore embedded commands in the files it scans.
- Capability inventory: Shell execution capabilities via
grep(SKILL.md). - Sanitization: None identified; the skill directly outputs grep matches which could contain malicious instructions.
Audit Metadata