brainstorm
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute discovery commands includingls,cat,git,find, andgrepfor the purpose of project analysis. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the ingestion of untrusted local files.
- Ingestion points: Project files and git logs are read into context via
catandgrepinSKILL.md. - Boundary markers: No delimiters or instructions are used to separate file content from the skill's logic.
- Capability inventory: The skill employs the
Bashtool to perform read-only discovery operations. - Sanitization: Content read from the local files is not sanitized or filtered before analysis.
Audit Metadata