fixing-gpuix-layout
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
window-shot.shscript generates temporary Swift and Python source files using heredocs and executes them at runtime usingxcrun swiftandpython3for window management and image processing tasks. - [COMMAND_EXECUTION]: The skill instructs the agent to perform various system-level operations including taking screenshots with
screencapture, building native components withcargo, and managing application processes usingnohupandpkill. - [DATA_EXFILTRATION]: The
window-shot.shutility captures the visual contents of application windows belonging to thebunorsuperterminalprocesses and saves them to/tmp/st-window.png. This capability provides a mechanism for capturing visual data from the application environment. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by processing natural language instructions from users to perform code modifications. Ingestion points: User bug reports and layout requests referenced in
SKILL.md. Boundary markers: Absent. Capability inventory: File writing, system command execution, and dynamic script generation/execution. Sanitization: Absent.
Audit Metadata