write-script-bash
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the 'wmill' CLI tool for script management. Key commands include 'wmill script preview' for executing local code, 'wmill script run' for deployed scripts, and 'wmill sync push' for deployment operations.
- [EXTERNAL_DOWNLOADS]: The 'wmill generate-metadata' command is used to re-resolve script dependencies, which involves fetching metadata from external package registries and the Windmill backend.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent generates Bash scripts based on user requirements and then executes them. This is a common pattern for developer tools but constitutes an attack surface if malicious user input is incorporated into the script code without validation.
Audit Metadata