brain-link-discipline
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard
gitcommands to accurately derive file paths and remote configurations. - Evidence: Commands include
git ls-files --full-name,git rev-parse, andgit remote get-url origin. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to verify the existence of links on remote platforms.
- Evidence: Uses
curlto check path status on the GitHub API. - Context: This targets a well-known service (GitHub) for legitimate verification purposes.
- [DATA_EXPOSURE]: The instructions involve the use of the
GITHUB_TOKENenvironment variable for authenticated API requests. - Evidence: A
curlcommand example includes anAuthorization: token $GITHUB_TOKENheader. - Context: The skill explicitly provides security instructions to prevent credential exfiltration by warning the agent to never send the token to unverified or unexpected remote hosts derived from the environment.
Audit Metadata