organize-desktop
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to perform administrative and file system tasks.
- Uses
hdiutil detach -forceto unmount disk volumes. - Uses
mvto relocate files based on filename patterns. - Uses
rmto delete.DS_Storefiles andkillall Finderto restart the Finder process. - Uses
osascriptto execute AppleScript for UI automation and icon positioning. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing untrusted data (local filenames).
- Ingestion points: Reads directory contents from
/Users/ume/Desktop/and fetches item names via AppleScript (SKILL.md). - Boundary markers: Absent. The agent relies on filename patterns to determine logic flow without explicit delimiters for the data.
- Capability inventory: File moving (
mv), disk management (hdiutil), process management (killall), and UI manipulation (osascript) inSKILL.md. - Sanitization: Absent. The skill does not explicitly sanitize or validate filenames before using them in the organization logic.
Audit Metadata