skills/terrylica/cc-skills/log-reader/Gen Agent Trust Hub

log-reader

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze MetaTrader 5 log files, which are external data sources that could potentially contain malicious content intended to influence the agent's behavior.
  • Ingestion points: The skill uses the Read tool to access log files located at $MQL5_ROOT/Program Files/MetaTrader 5/MQL5/Logs/YYYYMMDD.log (SKILL.md).
  • Boundary markers: No specific delimiters or boundary instructions are provided to the agent to distinguish between log content and its own instructions.
  • Capability inventory: The skill utilizes the Bash, Read, and Grep tools to process the data.
  • Sanitization: While the skill suggests filtering sensitive trading information, it lacks sanitization or validation to prevent the execution of embedded instructions within the logs.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands through the Bash tool to perform system operations.
  • Evidence: The skill uses bash scripts to determine the current date, construct file paths, and execute commands such as tail to view log output (SKILL.md).
  • [PERSISTENCE]: The skill includes explicit instructions for the agent to modify its own definition file based on runtime experiences, creating a potential mechanism for persistent instruction changes.
  • Evidence: The "Self-Evolving Skill" and "Post-Execution Reflection" sections (SKILL.md) instruct the agent to "fix this file immediately" if instructions are wrong or if a workaround was required, allowing for automated modification of the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 02:26 PM