quota
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/quota-queueshell script executes commands to monitor usage quotas and run pending tasks. It allows for custom quota-checking logic via theQUOTA_CMDandQUOTA_SPEND_CMDenvironment variables. - [DYNAMIC_EXECUTION]: The
quota-queueutility (inscripts/quota-queue) dynamically identifies and executes files at runtime. It searches for files with the executable bit set in apending/subdirectory and runs them in sequence. - [INDIRECT_PROMPT_INJECTION]: The skill's task queuing system processes external executable files, which creates an attack surface for instructions to enter the agent's context.
- Ingestion points: Executable files found in the
pending/subdirectory of the user-provided queue directory. - Boundary markers: None; the skill does not implement specific delimiters or instructions to ignore potential prompts within the tasks.
- Capability inventory: The
quota-queuescript can execute any local file with appropriate permissions, which may involve network or file system operations. - Sanitization: No sanitization or content validation of the task files is performed prior to execution.
Audit Metadata