rmbc-upgrade
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts
bin/rmbc-upgradeandbin/rmbc-update-check, and sourceslib/rmbc-common.shfrom the skill's own directory structure. These are standard operations for an upgrade utility and are limited to the skill's known installation path. - [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting and processing data from its environment and local files.
- Ingestion points: Version strings parsed from preamble output and the contents of
CHANGELOG.md(Step 3). - Boundary markers: Absent; the skill does not use delimiters to wrap the ingested content.
- Capability inventory:
Bashfor command execution andReadfor file access. - Sanitization: Absent; the changelog content is summarized directly for the agent. However, since the source is the skill's own package, the risk is consistent with standard application behavior.
Audit Metadata