malware-scan-yara
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
yarautility to perform recursive directory scans and file analysis. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, potentially untrusted files, which could contain malicious instructions designed to influence the agent's behavior during result parsing.
- Ingestion points: Target files and directories specified in the
<target-path>parameter withinSKILL.md. - Boundary markers: Absent; findings including metadata and matched strings are presented directly to the agent context.
- Capability inventory: The skill utilizes shell command execution via
yaraas defined inSKILL.md. - Sanitization: No specific filtering or escaping mechanisms are defined for the data extracted from the scanned files before it is processed by the agent.
Audit Metadata