skills/t0msilver/skills/quota/Gen Agent Trust Hub

quota

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/quota-queue shell script executes commands to monitor usage quotas and run pending tasks. It allows for custom quota-checking logic via the QUOTA_CMD and QUOTA_SPEND_CMD environment variables.
  • [DYNAMIC_EXECUTION]: The quota-queue utility (in scripts/quota-queue) dynamically identifies and executes files at runtime. It searches for files with the executable bit set in a pending/ subdirectory and runs them in sequence.
  • [INDIRECT_PROMPT_INJECTION]: The skill's task queuing system processes external executable files, which creates an attack surface for instructions to enter the agent's context.
  • Ingestion points: Executable files found in the pending/ subdirectory of the user-provided queue directory.
  • Boundary markers: None; the skill does not implement specific delimiters or instructions to ignore potential prompts within the tasks.
  • Capability inventory: The quota-queue script can execute any local file with appropriate permissions, which may involve network or file system operations.
  • Sanitization: No sanitization or content validation of the task files is performed prior to execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:10 AM