quadrants
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes task data retrieved from an external API, which could potentially contain malicious instructions. 1. Ingestion points: API responses returned by scripts/quadrants-cli.sh. 2. Boundary markers: Absent; the SKILL.md does not provide delimiters to separate task data from instructions. 3. Capability inventory: The skill can perform CRUD operations on tasks and projects via network requests. 4. Sanitization: Outbound data is sanitized using jq, but incoming task content is not explicitly sanitized before being passed to the agent context.
- [COMMAND_EXECUTION]: The skill uses a shell script (scripts/quadrants-cli.sh) to communicate with the service. The script follows security best practices by using jq to safely build JSON payloads, mitigating command injection vulnerabilities within the script's logic.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to the domain quadrants.ch and references a gateway IP (100.125.166.54) within the setup documentation.
Audit Metadata