bruin-agent
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Bruin CLI by downloading and executing a shell script directly from the vendor's website.
- Evidence:
curl -LsSf https://getbruin.com/install/cli | shin SKILL.md. - [COMMAND_EXECUTION]: The skill guides the agent to perform various system-level operations, including directory management, git repository initialization, and executing several Bruin CLI tools.
- Evidence: Commands such as
mkdir,git init,bruin init,bruin connections add, andbruin ai skillsare used across SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon instructions found in external sources like online documentation and template-generated README files, which could potentially contain malicious prompts.
- Ingestion points: Fetches content from
getbruin.com/docs/and reads local README files generated during project initialization (SKILL.md). - Boundary markers: No explicit delimiters or safety instructions are defined to wrap the external content being processed.
- Capability inventory: The skill has the ability to execute shell commands and modify the filesystem via the Bruin CLI (SKILL.md).
- Sanitization: There is no evidence of sanitization or validation of the documentation content before it is processed by the agent.
Recommendations
- HIGH: Downloads and executes remote code from: https://getbruin.com/install/cli - DO NOT USE without thorough review
Audit Metadata