organize

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell-based commands such as ls -la to inspect the file system and performs actions including creating directories, moving files, renaming them, and deleting content. These operations are core to the skill's functionality but involve executing commands that modify the user's environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data sourced from the file system (filenames and directory names), which could be manipulated to influence the agent's behavior.
  • Ingestion points: The skill reads directory listings and filenames using ls -la and subdirectory expansion as described in the "Scan" step (SKILL.md).
  • Boundary markers: Absent. The instructions do not explicitly tell the agent to ignore or delimit potentially malicious text embedded within the filenames it processes.
  • Capability inventory: The skill possesses capabilities for file system modification, including creating directories, moving/renaming files, and deleting files (SKILL.md).
  • Sanitization: Absent. There is no evidence of filename validation or sanitization before the data is used to formulate the organization plan or executed via shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:02 PM