tailing-build-output
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and act upon terminal log files, which are external data sources that may contain untrusted input from build tools or third-party dependencies. 1. Ingestion points: The agent reads terminal output logs located in the
<terminals_folder>. 2. Boundary markers: The instructions do not define delimiters or provide warnings for the agent to ignore potentially malicious instructions embedded within the logs. 3. Capability inventory: The skill utilizes the agent's ability to read files and perform write operations to the source code repository. 4. Sanitization: The skill does not include any steps to sanitize or validate the content of the logs before the agent processes them.
Audit Metadata