onboarding
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
signetCLI tool for initial setup and uses thefindcommand to scan specific home directory paths (such as~/.openclawand~/.moltbot) to audit existing agent configurations for integration health. - [DATA_EXFILTRATION]: Conducts health and status checks by sending network requests via
curlto the local Signet daemon atlocalhost:3850. These operations are limited to the local machine and do not target external domains. - [PROMPT_INJECTION]: The skill implements a functional surface for indirect prompt injection by allowing user-defined 'Hard Rules' to be written into the
AGENTS.mdconfiguration file. 1. Ingestion points: User-provided input for custom instructions and rules during Step 4 of the onboarding process. 2. Boundary markers: The template directly interpolates the{{custom_instructions}}variable without additional delimiters or instructions to ignore embedded commands. 3. Capability inventory: The skill has the ability to write to the filesystem, execute local CLI tools, and perform network requests to the local daemon. 4. Sanitization: No sanitization or validation is applied to user-provided strings before they are persisted to the configuration files.
Audit Metadata