status
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
wc,ls,grep, andsedto analyze local file system metadata. These operations are restricted to the agent's own project configuration and memory state files (e.g.,~/.claude/andCLAUDE.md). - [INDIRECT_PROMPT_INJECTION]: The skill extracts file paths from
MEMORY.mdto verify their existence. While this involves processing potentially untrusted text stored in the agent's memory, the resulting action (checking if a file exists) is benign and does not lead to command injection or unauthorized data access. - [DATA_EXPOSURE]: The skill accesses line counts and file lists from the agent's internal memory and rule files. This data is used solely for generating a health report and is not exfiltrated to any external destination.
Audit Metadata