who-are-you
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local shell command execution to retrieve system metadata, including
unamefor OS information,datefor timestamps, andpgrepfor process detection. These operations are used for informational purposes within the agent's current execution environment. - [DATA_EXPOSURE]: The skill identifies and displays the source IP address of an SSH connection from the environment variable and lists terminal panes using
wezterm cli. This behavior is intended to provide transparency about the connection and workspace context. - [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection by reading project-local configuration files.
- Ingestion points: Reads metadata from
CLAUDE.mdusinggreppatterns. - Boundary markers: No specific delimiters or warnings are used when displaying the extracted content.
- Capability inventory: The skill has the capability to read local files and execute shell commands to display their contents.
- Sanitization: Content is filtered by specific line prefixes, which provides a basic level of validation against arbitrary content ingestion.
Audit Metadata