email-retention-sequences
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to manage its environment and state.
- It dynamically searches for its installation path to execute
bin/rmbc-update-checkandbin/rmbc-analyticsfor maintenance and logging. - It utilizes
sedto modify configuration files in the user's home directory and manages session trackers in/tmp/. - It interacts with a CLI tool via
/bin/rmbc-workspaceto handle product-specific data. - [DATA_EXFILTRATION]: The skill includes a telemetry feature that logs usage metadata to an external service.
- A background process calls
rmbc-analyticsto transmit the skill name and active product name. - While the skill prompts for user consent, it facilitates the transfer of workflow patterns to a remote server.
- [PROMPT_INJECTION]: The skill processes data from external local files which creates a surface for indirect prompt injection.
- Ingestion points: The skill reads research and creative brief data from
research.md,mechanism.md, andbrief.mdwithin the user's local product workspace. - Boundary markers: The execution flow does not use specific delimiters or instructions to the AI to ignore potential commands embedded within these files.
- Capability inventory: The agent has the ability to execute shell commands and read/write files, which could be targeted by instructions hidden in the research files.
- Sanitization: No validation or sanitization logic is implemented for the content retrieved from these local markdown files before it is used in the final prompt.
Audit Metadata