ivp-behavior-builder
Warn
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: MEDIUMPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill instructs the agent to modify user shell profile files such as
.bashrcto add directories to theIVP_BEHAVIOR_DIRSenvironment variable. This allows the system to persistently locate custom behavior libraries across different sessions.\n - Evidence:
SKILL.mdmentions adding the projectlibdirectory to shell startup files for persistent setup.\n - Evidence:
references/behavior-build.mdprovides specific shell commands for appending paths to.bashrc.\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local directories and reads existing source files to guide code generation and modification. This creates a vulnerability where malicious instructions embedded in a project's source code or configuration files could be executed by the agent.\n - Ingestion points: Environment variables (
MOOS_IVP_ROOT), workspace source directories (ivp/src), and existing C++ header/source files.\n - Boundary markers: None used when reading or processing local file content.\n
- Capability inventory: Shell command execution (
cmake,nm), file modification, and execution of local build scripts.\n - Sanitization: No sanitization or validation of the content of files read from the local environment is required by the instructions.\n- [DYNAMIC_EXECUTION]: The skill is centered around the generation and compilation of C++ shared libraries that are dynamically loaded at runtime. It specifically guides the agent on implementing factory functions for dynamic symbol resolution.\n
- Evidence: The skill provides instructions for building
.soor.dylibfiles and verifying the presence of thecreateBehaviorsymbol.\n- [COMMAND_EXECUTION]: The skill automates several steps of the development lifecycle by executing shell commands and scripts from the local MOOS-IvP framework.\n - Evidence: Includes execution of
cmakefor build automation,nmfor binary inspection, and theGenBehaviorframework utility.
Audit Metadata