7zip
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
7zcommand-line utility for archiving, listing, and extracting files. It provides specific syntax for AES-256 encryption and volume splitting, which are standard features of the tool. - [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting external data (file paths and archive targets) which could potentially contain malicious content if the input source is untrusted.
- Ingestion points: User-provided 'Approved file scope' and 'path scope' defined in the
SKILL.mdfrontmatter and procedure. - Boundary markers: The instructions include explicit 'Safety Boundaries' and a procedure to 'Archive only the minimum approved file set' to limit the scope of operations.
- Capability inventory: The skill uses the
7ztool to read from and write to the filesystem, as seen in the command examples inSKILL.md. - Sanitization: No specific technical sanitization or validation of the input paths is defined beyond the instructional guidelines provided to the agent.
Audit Metadata