reproduce-bug
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill explicitly instructs the agent to execute arbitrary build and PoC commands provided by the local project context. \n
- Evidence: Step 1 and 2 require building a baseline with the "project's own command" and exercising a PoC using
build_argvandpoc_argv. \n- [DYNAMIC_EXECUTION]: The skill performs runtime execution of generated or project-provided artifacts to observe failure conditions. \n - Evidence: The procedure involves running
target_artifactand monitoring for specific markers likePATCH_REACHED. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local repositories and external records to determine its execution path, creating a surface for indirect instructions to influence agent behavior. \n - Ingestion points:
finding.json, local baseline checkout, and PoC source files. \n - Boundary markers: Absent; instructions do not specify delimiters for distinguishing project data from instructions. \n
- Capability inventory: Shell command execution via
build_argvandpoc_argv, and script execution viauv run. \n - Sanitization: Not present; the agent is expected to execute the commands defined in the record directly.
Audit Metadata