flows-app-brief

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch the @cognite/cli package from the NPM registry. This is an intended function to ensure the user has the latest version of the vendor's tools.\n- [REMOTE_CODE_EXECUTION]: The skill executes the @cognite/cli tool to synchronize review skills. The agent is instructed to ask for user permission via AskQuestion before performing this action.\n- [COMMAND_EXECUTION]: The skill invokes shell commands to read repository state, such as git config --get remote.origin.url and git config user.name, to prepopulate the app brief with metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local files such as README.md, package.json, and specification files to suggest brief content.\n
  • Ingestion points: The skill reads README.md, specs/, app.json, and package.json (SKILL.md).\n
  • Boundary markers: No special prompt delimiters are used, but the skill requires the user to verify each draft.\n
  • Capability inventory: The skill utilizes Bash and Write tools.\n
  • Sanitization: Drafted values are explicitly confirmed by the user through the AskQuestion tool before any filesystem modifications occur.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 11:36 AM