dice-roll
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on constructing and executing specific one-liner shell commands to generate random integers based on a
randint(min, max)primitive. - Evidence:
references/rng-fallbacks.mddefines several templates for obtaining random values usingnode -e,python -c,pwsh -Command, and Unix utilities likeshuf,jot, andawk. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data, such as dice notation (e.g., '3d6+1') or narrative context, which serves as the basis for its randomization commands.
- Ingestion points: User-provided prompts specifying dice rolls, list choices, or story questions requiring an 'oracle' result.
- Boundary markers: The skill does not employ explicit delimiters for user input, relying instead on the agent's interpretation of the request into numerical ranges.
- Capability inventory: The skill utilizes the
Bashtool to execute commands through the interpreters allowed in theSKILL.mdfrontmatter. - Sanitization: Instructions mandate that the agent converts user requests into specific integer-based
randintcalls, which functions as a validation step before command execution.
Audit Metadata