skills/brave/brave-core/top-crashers/Gen Agent Trust Hub

top-crashers

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The top-crashers.py script executes ripgrep or grep to perform code origin classification by searching for symbols in the local source tree. This is implemented securely using list-based arguments without a shell, mitigating the risk of command injection.\n- [EXTERNAL_DOWNLOADS]: The skill retrieves version mapping data from the official Brave GitHub repository and crash data from the vendor's Backtrace API. These network operations target trusted domains and well-known services consistent with the skill's purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external crash report data.\n
  • Ingestion points: JSON data from Backtrace API.\n
  • Boundary markers: Data is parsed into structured JSON/Markdown.\n
  • Capability inventory: Local file search via grep and network requests.\n
  • Sanitization: The sanitize_frame function strips PII paths using regex.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 03:58 PM
Security Audit — agent-trust-hub — top-crashers