skills/davidondrej/skills/bb-cli/Gen Agent Trust Hub

bb-cli

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to control the bb CLI, which possesses extensive capabilities for executing shell commands, managing persistent terminal sessions, and performing system mutations as part of its core functionality.
  • [EXTERNAL_DOWNLOADS]: The documentation describes procedures for installing plugins and skills from external sources, including npm registries, Git repositories, and a community marketplace catalog hosted at getbb.app.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface where the agent processes data from external sources such as command outputs, terminal logs, and file reads. This content could potentially contain instructions intended to influence subsequent agent actions, although the skill itself does not contain malicious patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:05 PM