gplay-testers-orchestration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes output from external tool commands.
- Ingestion points: Data is read from the
gplay testers getcommand and stored in the$CURRENTvariable inSKILL.md. - Boundary markers: None identified; the skill does not use delimiters or warnings to separate tool output from instructions.
- Capability inventory: The skill executes
gplaycommands and shell utilities includingjq,grep, andpaste. - Sanitization: The skill uses
jqandgrepfor data extraction and filtering, but does not perform sanitization to prevent the interpolation of malicious content from the tool output into subsequent commands. - [COMMAND_EXECUTION]: The skill generates shell commands that incorporate data retrieved from external sources.
- Evidence: Use of
jqto parse JSON results andgrep/pasteto construct email lists for thegplay testers updatecommand.
Audit Metadata