product-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command for the Bruin CLI using
curl -LsSf https://getbruin.com/install/cli | shinworkflow.md. This is a standard installation pattern from the official vendor website. - [COMMAND_EXECUTION]: The skill utilizes several local CLI tools including
bruin(init, version, upgrade, run, validate) andgitto manage data pipelines and project setup. It also includes instructions for adding an MCP server viaclaude mcp add. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from sources like PostHog, Firebase, and various template configuration files.
- Ingestion points: The agent is instructed to read
pipeline.ymlvariables, asset filters, and template READMEs as described inworkflow.md. - Boundary markers: Guidelines in
analysis.mdinstruct the agent to verify data freshness and source documentation before processing or writing SQL. - Capability inventory: Includes the ability to execute
bruin run,bruin validate, and file system operations viagit. - Sanitization: Instructions in
SKILL.mdexplicitly forbid pulling raw user-level event streams into context and mandate aggregation in SQL first to minimize data exposure.
Audit Metadata