always-current-datetime
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of a bundled Python script to provide accurate time context for the agent's operations.
- Evidence:
SKILL.mdinstructs the host to runpython3 scripts/current_anchor.pyon Linux/macOS andpython scripts/current_anchor.pyon Windows. - Evidence: The script
scripts/current_anchor.pyis a self-contained utility that uses the standard library (datetime,zoneinfo,os) to generate a JSON object containing the current time, weekday, and UTC offset. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an interaction surface where user-supplied natural language is resolved into absolute dates for downstream processing.
- Ingestion points: Direct user messages captured in the
refreshcommand flow. - Boundary markers: The skill instructions in
SKILL.mdexplicitly mandate preserving the user's original words while resolving dates for tool arguments, and provide a clarification mechanism for ambiguous phrases (e.g., 'next Friday'). - Capability inventory: The skill is restricted to local script execution for time acquisition and does not possess capabilities for network exfiltration or sensitive file system access.
- Sanitization: The script output is restricted to a predefined JSON schema validated by the agent, and the skill enforces a 'fail-closed' policy where temporal work is blocked if the script fails or returns invalid data.
Audit Metadata