log-reader
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze MetaTrader 5 log files, which are external data sources that could potentially contain malicious content intended to influence the agent's behavior.
- Ingestion points: The skill uses the
Readtool to access log files located at$MQL5_ROOT/Program Files/MetaTrader 5/MQL5/Logs/YYYYMMDD.log(SKILL.md). - Boundary markers: No specific delimiters or boundary instructions are provided to the agent to distinguish between log content and its own instructions.
- Capability inventory: The skill utilizes the
Bash,Read, andGreptools to process the data. - Sanitization: While the skill suggests filtering sensitive trading information, it lacks sanitization or validation to prevent the execution of embedded instructions within the logs.
- [COMMAND_EXECUTION]: The skill utilizes shell commands through the
Bashtool to perform system operations. - Evidence: The skill uses bash scripts to determine the current date, construct file paths, and execute commands such as
tailto view log output (SKILL.md). - [PERSISTENCE]: The skill includes explicit instructions for the agent to modify its own definition file based on runtime experiences, creating a potential mechanism for persistent instruction changes.
- Evidence: The "Self-Evolving Skill" and "Post-Execution Reflection" sections (SKILL.md) instruct the agent to "fix this file immediately" if instructions are wrong or if a workaround was required, allowing for automated modification of the skill's instructions.
Audit Metadata