file-organizer
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands including
find,ls,du,mkdir, andmvto analyze, list, and reorganize the local file system. These commands are consistent with the skill's stated purpose. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) because it ingests and processes untrusted metadata from the local filesystem.
- Ingestion points: File names, directory paths, and file type metadata (retrieved via the
filecommand) within theSKILL.mdinstructions. - Boundary markers: Absent. There are no instructions or delimiters provided to the agent to distinguish between file system data and actionable instructions.
- Capability inventory: The skill has the capability to move, rename, and delete files, and create directories across the user's filesystem.
- Sanitization: Absent. The skill does not perform any validation or sanitization of the file names or metadata before they are used to influence the agent's organization decisions.
Audit Metadata