brightdata-cli
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions include fetching and executing a shell script from the vendor's official domain:
curl -fsSL https://cli.brightdata.com/install.sh | bash. This is a standard installation method provided by the author. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@brightdata/clipackage via the npm registry for standard cross-platform installation. - [COMMAND_EXECUTION]: The skill's functionality is centered around executing
bdataandbrightdatashell commands to interact with the vendor's web data platform. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from the web.
- Ingestion points:
bdata scrape,bdata search, andbdata pipelinescommands fetch external content from arbitrary URLs into the agent context. - Boundary markers: The instructions do not define specific markers or delimiters to isolate scraped content from agent instructions.
- Capability inventory: The skill utilizes shell command execution and file system writes (
-oflag) to handle data. - Sanitization: There is no evidence of content sanitization or filtering for the data retrieved from external URLs before it is processed by the agent.
Audit Metadata