veris-reference
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/record.shscript executes shell commands provided as arguments viash -cto facilitate the recording of 'red' (failing) and 'green' (passing) test runs. This is the core functionality of the test-recording tool. - [DYNAMIC_EXECUTION]: The
scripts/record.shscript allows for the execution of dynamic 'predicate' commands to verify the state of the environment during test cycles. - [INDIRECT_PROMPT_INJECTION]: The skill scripts process local files and command outputs, creating an ingestion surface for potentially untrusted data.
- Ingestion points: The scripts read the
measurements.jsonlledger and capture the standard output/error of executed test commands inscripts/record.sh. - Boundary markers: Data is structured using JSON and JSONL formats.
- Capability inventory: The skill utilizes shell execution, file system operations, and network requests via
curlto interact with the vendor's simulation environment. - Sanitization: The
scripts/ledger.shutility includes logic to scan for and block the inclusion of sensitive credential patterns (e.g., AWS keys, Slack tokens) in the ledger, serving as a security safeguard. - [SAFE]: All network operations are directed towards the vendor's official API domain (
svc.api.veris.ai). The behavior of the scripts and documentation is entirely consistent with the primary purpose of providing a developer reference and verification toolkit.
Audit Metadata