always-current-datetime

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the execution of a bundled Python script to provide accurate time context for the agent's operations.
  • Evidence: SKILL.md instructs the host to run python3 scripts/current_anchor.py on Linux/macOS and python scripts/current_anchor.py on Windows.
  • Evidence: The script scripts/current_anchor.py is a self-contained utility that uses the standard library (datetime, zoneinfo, os) to generate a JSON object containing the current time, weekday, and UTC offset.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an interaction surface where user-supplied natural language is resolved into absolute dates for downstream processing.
  • Ingestion points: Direct user messages captured in the refresh command flow.
  • Boundary markers: The skill instructions in SKILL.md explicitly mandate preserving the user's original words while resolving dates for tool arguments, and provide a clarification mechanism for ambiguous phrases (e.g., 'next Friday').
  • Capability inventory: The skill is restricted to local script execution for time acquisition and does not possess capabilities for network exfiltration or sensitive file system access.
  • Sanitization: The script output is restricted to a predefined JSON schema validated by the agent, and the skill enforces a 'fail-closed' policy where temporal work is blocked if the script fails or returns invalid data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:01 AM