chunk
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain hidden instructions targeting the AI agent.
- Ingestion points: The
chunk build-promptcommand (referenced inreferences/chunk-cli.md) generates context for the AI by reading GitHub pull request comments. - Capability inventory: The skill is capable of executing shell commands via the
chunkCLI, includingchunk task run,chunk validate, and environment setup actions. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the data ingested from GitHub.
- Sanitization: There is no mention of filtering or sanitizing the input retrieved from external GitHub comments before it is processed by the AI.
- [EXTERNAL_DOWNLOADS]: The skill directs the user to download a CLI tool from a remote repository.
- Evidence: The installation command
brew install CircleCI-Public/circleci/chunkfetches the tool from the official CircleCI-Public GitHub organization. This is a vendor-owned resource matching the skill's author. - [COMMAND_EXECUTION]: The skill requires the execution of multiple shell commands to set up and use the Chunk tool.
- The agent is instructed to perform actions such as
chunk auth login,chunk init,chunk validate, andchunk task runto manage CI/CD workflows and sandbox environments.
Audit Metadata