revenue-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Bruin CLI using a piped shell script from the vendor's official website (https://getbruin.com/install/cli). This is the standard installation procedure provided by the official project.
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and documentation from getbruin.com, the official domain for the Bruin CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze external files, including billing templates and report assets, which presents a surface for indirect prompt injection.
- Ingestion points: External data sources like Stripe/Shopify reports, ingestion/source files, and decisions.md.
- Boundary markers: No explicit delimiter usage or 'ignore instructions' markers are specified for processing data.
- Capability inventory: Uses bruin run, bruin init, bruin validate, and git commands.
- Sanitization: No specific sanitization methods for ingested data are mentioned, although strict constraints are placed on how the agent handles credentials and production writes.
Audit Metadata