bulk-reader
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes large amounts of external data from files, which presents a surface for indirect prompt injection. (1) Ingestion points: File content accessed via the --paths parameter. (2) Boundary markers: Not specified; the skill relies on the external AiKA service for processing. (3) Capability inventory: Script-based file reading and data transmission. (4) Sanitization: No sanitization of file content is mentioned.
- [COMMAND_EXECUTION]: The skill invokes a script named bulk-read within the plugin root directory to process the specified files.
Audit Metadata