dbs
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bundled shell and Python scripts (check-update.sh, list-official-skills.py, numbered-prompts.py) to manage its operations and discover other available tools. These scripts are part of the skill package and do not take arbitrary user input.\n- [EXTERNAL_DOWNLOADS]: The skill connects to its official GitHub repository to retrieve update metadata and new prompt templates. These downloads are restricted to the vendor's own verified GitHub organization (dontbesilent2025) and are documented neutrally as legitimate vendor resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes task-related materials and instruction templates from external sources. It mitigates potential risks by using SHA-256 signatures to verify the integrity of any remote instructions before they are processed by the agent, and it does not have capabilities to exfiltrate data or modify system persistence.
Audit Metadata