finding-dev-server-url
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests terminal output files which are considered untrusted data sources controlled by external processes. \n
- Ingestion points: The skill reads files from the
<terminals_folder>directory which contain raw terminal history. \n - Boundary markers: There are no explicit delimiters or boundary markers used to separate the terminal log content from the skill's instructions. \n
- Capability inventory: The skill has the ability to execute shell commands (
ls), read local files, and navigate a browser to local URLs. \n - Sanitization: No sanitization or filtering of the terminal content is described before it is processed by the AI. \n- [COMMAND_EXECUTION]: The skill workflow involves executing the
lscommand to discover terminal log files in the filesystem.
Audit Metadata