add-ingestr-source
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process information from external sources, including documentation, PRs, and the
ingestrrepository's source code. This creates a surface where instructions embedded in those external materials could influence the agent's behavior. - Ingestion points: Upstream documentation (
getbruin.com), third-party PRs, and thebruin-data/ingestrrepository code. - Boundary markers: No explicit boundary markers or warnings to ignore embedded instructions are provided.
- Capability inventory: The skill has capabilities to modify Go code, update YAML/JSON configuration files, and execute shell commands (
go run,make). - Sanitization: No specific sanitization or validation of the external content is mentioned.
- [COMMAND_EXECUTION]: The skill workflow involves executing local shell commands to regenerate schema expectations and run project tests.
- Evidence: The skill instructs running
go run -tags="no_duckdb_arrow" . internal connections | jq . > integration-tests/expectations/expected_connections_schema.jsonto update the connection schema, as well asmake formatandmake testfor validation.
Audit Metadata