flows-app-brief
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the@cognite/clipackage from the NPM registry. This is an intended function to ensure the user has the latest version of the vendor's tools.\n- [REMOTE_CODE_EXECUTION]: The skill executes the@cognite/clitool to synchronize review skills. The agent is instructed to ask for user permission viaAskQuestionbefore performing this action.\n- [COMMAND_EXECUTION]: The skill invokes shell commands to read repository state, such asgit config --get remote.origin.urlandgit config user.name, to prepopulate the app brief with metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local files such asREADME.md,package.json, and specification files to suggest brief content.\n - Ingestion points: The skill reads
README.md,specs/,app.json, andpackage.json(SKILL.md).\n - Boundary markers: No special prompt delimiters are used, but the skill requires the user to verify each draft.\n
- Capability inventory: The skill utilizes
BashandWritetools.\n - Sanitization: Drafted values are explicitly confirmed by the user through the
AskQuestiontool before any filesystem modifications occur.
Audit Metadata