Root Cause Tracing
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
find-polluter.shscript executes thenpm testcommand on local files found on disk. This is the primary function of the tool, intended to isolate which specific test file is causing environment pollution (e.g., creating unintended files).\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for the agent to ingest and act upon local file structures which could theoretically contain malicious content.\n - Ingestion points: The
find-polluter.shscript uses a user-supplied glob pattern to identify files for execution via thefindutility.\n - Boundary markers: None; the script operates on the assumption that files matching the pattern are valid test files within the project.\n
- Capability inventory: The script performs shell execution of the test runner (
npm test) on files identified on the local filesystem.\n - Sanitization: Input patterns and resulting filenames are used within the script. While the filename is quoted (
"$TEST_FILE") to prevent simple shell injection, the skill relies on the integrity of the files present in the local development environment.
Audit Metadata