keep-segment
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like find and grep to search for documents containing sensitive business metrics such as ARR and MRR.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface.
- Ingestion points: Processes content from various local files (*.md, *.csv, *.json) found in the workspace.
- Boundary markers: Absent. The skill does not implement delimiters to isolate untrusted file content from the agent instructions.
- Capability inventory: Possesses Bash and Read capabilities to access and manipulate file data.
- Sanitization: Absent. No filtering or sanitization of the discovered file content is performed.
Audit Metadata