plain-bug
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to detect environment versions and system details using
uv run plain,uv run python, anduname. - [COMMAND_EXECUTION]: Utilizes the GitHub CLI (
gh) to create repository issues. - [DATA_EXFILTRATION]: Transmits collected environment details and user-provided bug descriptions to the
dropseed/plainrepository. This is intentional and targets a vendor-owned resource. - [PROMPT_INJECTION]: Interpolates user-provided text into shell command templates, creating an indirect prompt injection surface. Ingestion points: user-provided bug title and description. Boundary markers: absent. Capability inventory: shell execution via
gh. Sanitization: relies on manual user review before submission.
Audit Metadata