bruin-agent

Fail

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Bruin CLI by downloading and executing a shell script directly from the vendor's website.
  • Evidence: curl -LsSf https://getbruin.com/install/cli | sh in SKILL.md.
  • [COMMAND_EXECUTION]: The skill guides the agent to perform various system-level operations, including directory management, git repository initialization, and executing several Bruin CLI tools.
  • Evidence: Commands such as mkdir, git init, bruin init, bruin connections add, and bruin ai skills are used across SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon instructions found in external sources like online documentation and template-generated README files, which could potentially contain malicious prompts.
  • Ingestion points: Fetches content from getbruin.com/docs/ and reads local README files generated during project initialization (SKILL.md).
  • Boundary markers: No explicit delimiters or safety instructions are defined to wrap the external content being processed.
  • Capability inventory: The skill has the ability to execute shell commands and modify the filesystem via the Bruin CLI (SKILL.md).
  • Sanitization: There is no evidence of sanitization or validation of the documentation content before it is processed by the agent.
Recommendations
  • HIGH: Downloads and executes remote code from: https://getbruin.com/install/cli - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 12, 2026, 04:40 PM