ivp-behavior-builder

Warn

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: MEDIUMPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill instructs the agent to modify user shell profile files such as .bashrc to add directories to the IVP_BEHAVIOR_DIRS environment variable. This allows the system to persistently locate custom behavior libraries across different sessions.\n
  • Evidence: SKILL.md mentions adding the project lib directory to shell startup files for persistent setup.\n
  • Evidence: references/behavior-build.md provides specific shell commands for appending paths to .bashrc.\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local directories and reads existing source files to guide code generation and modification. This creates a vulnerability where malicious instructions embedded in a project's source code or configuration files could be executed by the agent.\n
  • Ingestion points: Environment variables (MOOS_IVP_ROOT), workspace source directories (ivp/src), and existing C++ header/source files.\n
  • Boundary markers: None used when reading or processing local file content.\n
  • Capability inventory: Shell command execution (cmake, nm), file modification, and execution of local build scripts.\n
  • Sanitization: No sanitization or validation of the content of files read from the local environment is required by the instructions.\n- [DYNAMIC_EXECUTION]: The skill is centered around the generation and compilation of C++ shared libraries that are dynamically loaded at runtime. It specifically guides the agent on implementing factory functions for dynamic symbol resolution.\n
  • Evidence: The skill provides instructions for building .so or .dylib files and verifying the presence of the createBehavior symbol.\n- [COMMAND_EXECUTION]: The skill automates several steps of the development lifecycle by executing shell commands and scripts from the local MOOS-IvP framework.\n
  • Evidence: Includes execution of cmake for build automation, nm for binary inspection, and the GenBehavior framework utility.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 20, 2026, 11:28 PM