surge-landing
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executepython3 -m surge_agent.uiuxcommands to search for landing page patterns and UX friction points. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection and command injection.
- Ingestion points: User-provided product types and product reasoning are extracted from the user request and used as search queries.
- Boundary markers: None identified. The instructions do not specify any sanitization or escaping for the
{product_type}variable. - Capability inventory: The skill has access to the
Bashtool, which is used to execute shell commands with the interpolated user input. - Sanitization: There is no evidence of input validation or sanitization before the user-provided strings are passed to the shell.
Audit Metadata