resume
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands such as
git checkout,cat, andgit logto manage experiment branches and read configuration files. - [COMMAND_EXECUTION]: Runs a local Python script
setup_experiment.pyto list experiments and determine their status. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection by reading external data into the agent's context.
- Ingestion points: Reads from
.autoresearch/{domain}/{name}/config.cfg,program.md, andresults.tsvinSKILL.md. - Boundary markers: None identified; files are read directly into the execution context.
- Capability inventory: The skill can execute git commands and Python scripts.
- Sanitization: No sanitization or validation of the file content is performed before it is presented to the agent.
Audit Metadata