live-device
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands using
python3to interact with project-specific scripts likelive_device.pyandpath_claims.pyfor managing device status and file claims. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests data from project files (Kotlin, Java, Swift) and monitors external outputs from
live_device.pyand.moru/live-device/events.jsonlto verify build results. - Ingestion points: Project source files and
.moru/live-device/events.jsonl. - Boundary markers: No specific delimiters or warnings for embedded instructions are defined for the ingested data.
- Capability inventory: The skill utilizes shell command execution (
python3) and file system write operations. - Sanitization: No evidence of sanitization or filtering of external content is present in the instructions.
Audit Metadata