br
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's core functionality relies on executing the 'br' (Beads Rust) and 'bv' (Beads Viewer) binaries to manage local databases and perform issue tracking operations.
- [EXTERNAL_DOWNLOADS]: The
br upgradecommand facilitates a self-update mechanism, which involves downloading and executing code from remote sources to update the local binary. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting and processing untrusted data (issue titles, descriptions, and comments) that is subsequently presented to the agent in structured formats.
- Ingestion points: Untrusted data enters the agent's context through commands like
br list --json,br ready --json,br search, andbr show <id> --jsonwhich retrieve content from the issue database. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are used when presenting issue data to the agent.
- Capability inventory: The agent has access to powerful tools including shell command execution (via 'br' and 'bv'), Git operations for synchronization, and file system modifications within the project directory.
- Sanitization: There is no evidence of sanitization or filtering applied to issue content before it is processed by the agent.
Audit Metadata