brigade-admin
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts (
brigade.py,land.py) to perform administrative tasks, state management, and conflict resolution within the project store. - [PERSISTENCE]: Utilizes the
schedule_taskhost tool to establish recurring services for 'intake', 'morning', and 'evening' updates, maintaining long-term operation within the agent platform. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and other agents, creating a potential vector for indirect attacks.
- Ingestion points: Consumes content from
menu.md,restaurant.json, andlog.tsvfiles associated with other coordinators, and processes messages received from their respective threads. - Boundary markers: While it uses some quoting for user input, it lacks robust delimiters or sanitization for content relayed from coordinators to the user or other threads.
- Capability inventory: Has the ability to execute shell commands, manage thread messages via
t3_thread_send, and schedule platform tasks. - Sanitization: The instructions focus on relaying and summarizing coordinator actions, which may inadvertently propagate malicious instructions embedded in coordinator logs or messages.
Audit Metadata