organize-desktop

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to perform administrative and file system tasks.
  • Uses hdiutil detach -force to unmount disk volumes.
  • Uses mv to relocate files based on filename patterns.
  • Uses rm to delete .DS_Store files and killall Finder to restart the Finder process.
  • Uses osascript to execute AppleScript for UI automation and icon positioning.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing untrusted data (local filenames).
  • Ingestion points: Reads directory contents from /Users/ume/Desktop/ and fetches item names via AppleScript (SKILL.md).
  • Boundary markers: Absent. The agent relies on filename patterns to determine logic flow without explicit delimiters for the data.
  • Capability inventory: File moving (mv), disk management (hdiutil), process management (killall), and UI manipulation (osascript) in SKILL.md.
  • Sanitization: Absent. The skill does not explicitly sanitize or validate filenames before using them in the organization logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 08:02 AM