rock-agent-debug
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
rockcli sandbox execto perform various administrative tasks within the sandbox, such as listing files, reading logs, and inspecting Docker containers. These commands are executed with shell privileges in the target environment.\n- [DYNAMIC_EXECUTION]: The skill utilizespython3 -cto execute Python code provided as string literals. This pattern is used for parsing JSON outputs and formatting reports. Additionally, the skill includes a complete Python script template for batch scanning Harbor jobs.\n- [OBFUSCATION]: The skill useschr(39)within Python one-liners to represent single quotes. This technique is used to prevent shell injection or quoting issues when passing code topython3 -c, but it also serves to obscure the string literals being used.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from log files and job results which could be influenced by external actors.\n - Ingestion points: Accesses
result.json,trial.log,exception.txt, and other logs viacatcommands.\n - Boundary markers: No specific delimiters or safety instructions are used when reading these files.\n
- Capability inventory: Possesses significant capabilities including file system access and command execution via
rockcli.\n - Sanitization: There is no evidence of sanitization or filtering applied to the content of the logs before they are processed by the agent.
Audit Metadata