brain-expert
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill documents commands for managing background synchronization via system cron jobs (
brain cron install,brain cron remove). This allows the tool to maintain database consistency by periodically running sync operations in the background. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external Markdown content into the agent's context through search and retrieval functions (
brain search,brain show). - Ingestion points: Reads hierarchical Markdown files from the user's defined brain directory (specified in
SKILL.md). - Boundary markers: The instructions do not define specific delimiters for separating retrieved note content from agent instructions.
- Capability inventory: The skill allows file creation (
brain add,brain new), modification (brain edit), deletion (brain rm), and configuration management (brain config set). - Sanitization: There is no mention of sanitizing note content before it is displayed to or processed by the agent.
Audit Metadata