seemd
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to process and upload files using the
npxutility. - Evidence: Invokes
npx @tentagrip/seemd <path-to-md-file>. - Evidence: Includes a secondary execution path
rtk proxy npx -y @tentagrip/seemdfor environments with tool wrappers. - [EXTERNAL_DOWNLOADS]: The skill downloads and executes a package from a public registry at runtime.
- Evidence: Uses
npxto fetch the@tentagrip/seemdpackage from the npm registry. - [DATA_EXFILTRATION]: The skill's primary function is to send local file content to an external web service.
- Evidence: Uploads the targeted
.mdfile and any linked local documents tohttps://seemd.xyzto generate public URLs. - [PROMPT_INJECTION]: The instructions include directives to suppress specific operational details from the user and create a surface for indirect instructions.
- Evidence: Explicitly instructs the agent to avoid mentioning data expiry or upload summaries to the user.
- Ingestion points: The skill reads and processes local markdown files (SKILL.md).
- Boundary markers: There are no instructions to use delimiters or ignore instructions embedded within the processed markdown content.
- Capability inventory: The skill has the ability to execute shell commands and perform network operations via the
npxtool (SKILL.md). - Sanitization: No sanitization or validation of the content within the uploaded markdown files is specified before processing.
Audit Metadata