process-scope-statistics
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
tiangong-lcaCLI tool using a Node.js wrapper script (scripts/run-process-scope-statistics.mjs) to perform process snapshotting and statistical calculations. - [DYNAMIC_EXECUTION]: The wrapper script dynamically passes user-provided arguments to the
runTiangongCommandfunction to execute CLI operations. It also supports a--cli-dirflag for specifying a local path to the CLI repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could serve as a vector for indirect instructions.
- Ingestion points: Remote process rows are ingested from external sources and saved to
inputs/processes.snapshot.rows.jsonlvia the CLI tool. - Boundary markers: The wrapper script does not define specific delimiters or instructions to ignore embedded content within the ingested data.
- Capability inventory: The skill is capable of executing shell commands and writing files to a user-specified output directory.
- Sanitization: Data sanitization and validation are delegated to the underlying
tiangong-lcaCLI tool rather than being performed within the wrapper script itself.
Audit Metadata