lead-writer
Warn
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's preamble executes a series of shell commands and local binaries, such as
rmbc-update-checkandrmbc-analytics, to manage state and check for updates. It also uses shell utilities includinggrep,sed,mkdir, andtouchto read and modify configuration files in the~/.rmbc-skills/directory. - [DATA_EXFILTRATION]: The skill implements a telemetry system that logs usage information, including the specific skill name and product identifiers, through a local binary.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to an external video on YouTube for user onboarding. YouTube is a well-known service.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. Ingestion points: Untrusted data enters the agent context through the
product_descriptionandtarget_audienceinputs. Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data. Capability inventory: The skill has access to shell execution, binary execution, and filesystem modification as defined in its preamble and post-execution steps. Sanitization: No sanitization or validation logic is applied to the user-provided inputs.
Audit Metadata