basecamp-doctor
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
basecampCLI utility for diagnostic purposes (basecamp doctor --json) and remediation (basecamp auth login,basecamp setup). These are standard operations for a troubleshooting tool provided by the vendor and do not involve unauthorized command execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes JSON output from the diagnostic tool, creating a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested from the output of the
basecamp doctor --jsoncommand, specifically thehintandbreadcrumbsfields. - Boundary markers: None. The skill does not define specific delimiters to wrap the tool output.
- Capability inventory: The skill provides the agent with capabilities to execute shell commands (
basecamp setup,basecamp auth login) based on the diagnostic results. - Sanitization: There is no explicit sanitization or validation logic described for the external tool output before the agent processes it.
Audit Metadata