mint-unit
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
find,grep, andxargsin a Bash environment to identify and filter local files containing financial terminology. This is standard behavior for the skill's intended auditing function. - [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection (Category 8).
- Ingestion points: Local
.mdand.csvfiles are scanned and processed for financial data viafindandgrepcommands inSKILL.md. - Boundary markers: No delimiters or 'ignore embedded instruction' warnings are used when processing content from these files.
- Capability inventory: The skill utilizes
Bashfor file discovery and processing,Readfor data ingestion, andAskUserQuestionfor user interaction. - Sanitization: The skill lacks mechanisms to sanitize or validate the content of processed files before they are interpreted by the agent.
Audit Metadata