paired-probe
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/paired-probe.shaccepts shell commands via the--present,--absent, and--measurearguments. These commands are executed directly by the script, allowing the AI to run arbitrary shell operations under the guise of verification. - Evidence:
scripts/paired-probe.shlines 79, 107, 108:out=$(eval "$1" 2>&1). - [DYNAMIC_EXECUTION]: The script uses the
evalfunction in Bash to execute strings provided at the command line. This pattern is often a source of injection vulnerabilities if inputs are sourced from untrusted data, though in this case, the input typically comes from the agent's own instructions. - Evidence: The
run()function inscripts/paired-probe.sh(line 79) performseval "$1"on whatever string is passed to it.
Audit Metadata