audit-skill-by-derailment
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes terminal scrollback logs and agent traces which may contain untrusted data or instructions from previous agent sessions. Ingestion points: Terminal scrollback data is ingested via
herdr pane readinscripts/audit-worker-pane.shandscripts/read-herdr-panes.sh. Boundary markers: The audit templates inreferences/forensic-subagent-briefs.mduse markdown structure but lack explicit delimiters or instructions to ignore potential commands embedded in the processed logs. Capability inventory: The auditor agent possesses capabilities includingrun_command,write_to_file, and agent management tools viaherdr. Sanitization: The skill reads raw terminal output without sanitizing or escaping content before presenting it to the auditor subagent. - [COMMAND_EXECUTION]: Multiple utility scripts (
scripts/audit-worker-pane.sh,scripts/read-herdr-panes.sh,scripts/launch-derailment.sh) utilize shell commands to interact with theherdrCLI for agent lifecycle management and terminal inspection. - [DYNAMIC_EXECUTION]: The
scripts/parse-derailment-trace.shutility executes an embedded Python heredoc to parse and report on agent trace files. Additionally,scripts/launch-derailment.shexecutes a user-specified agent command throughbash -lc. - [EXTERNAL_DOWNLOADS]: The
README.mdfile contains installation instructions that fetch the skill and associated tools from the author's public GitHub repository (yigitkonur/skills-by-yigitkonur).
Audit Metadata