move-files
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
mvterminal command to relocate files. This is the standard method for moving files while preserving Git history and is appropriate for the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it reads and modifies file content (e.g., updating imports and paths) in Phase 2. This involves processing potentially untrusted data.
- Ingestion points: The agent reads the content of moved files in Phase 2 to perform updates.
- Boundary markers: The skill implements a mandatory pause and user confirmation step between Phase 1 (moving) and Phase 2 (editing), ensuring the user reviews the initial file operations.
- Capability inventory: Uses
mvfor file relocation and standard file-writing capabilities for content updates. - Sanitization: No explicit sanitization of file content is mentioned, but the human-in-the-loop staging process mitigates the risk of automated malicious updates.
Audit Metadata