bb-cli
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to control the
bbCLI, which possesses extensive capabilities for executing shell commands, managing persistent terminal sessions, and performing system mutations as part of its core functionality. - [EXTERNAL_DOWNLOADS]: The documentation describes procedures for installing plugins and skills from external sources, including npm registries, Git repositories, and a community marketplace catalog hosted at
getbb.app. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface where the agent processes data from external sources such as command outputs, terminal logs, and file reads. This content could potentially contain instructions intended to influence subsequent agent actions, although the skill itself does not contain malicious patterns.
Audit Metadata