Context-Inappropriate Capability
Medium
- Confidence
- 88% confidence
- Finding
- The skill directs the agent to execute shell commands and open local HTML files in a browser as part of normal operation. For a reporting skill, this is broader than necessary and can be abused to run unintended commands, expose local file paths, or render untrusted generated content in a browser context.
