Root Cause Tracing

Pass

Audited by Gen Agent Trust Hub on Jun 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a bash script find-polluter.sh that utilizes shell commands such as find, ls, and npm test to automate debugging workflows.
  • [REMOTE_CODE_EXECUTION]: The find-polluter.sh script performs dynamic execution of files found in the local environment, creating a surface for indirect prompt injection or malicious code execution if the target directory contains untrusted content. Ingestion points: The script reads file names and paths from the local directory via the find command in find-polluter.sh. Boundary markers: Absent. The script processes files without safety delimiters. Capability inventory: The script executes npm test on discovered files and performs directory listing with ls -la. Sanitization: The script lacks validation or sanitization of discovered file paths before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 3, 2026, 03:04 AM
Security Audit — agent-trust-hub — Root Cause Tracing