brain-link-discipline

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard git commands to accurately derive file paths and remote configurations.
  • Evidence: Commands include git ls-files --full-name, git rev-parse, and git remote get-url origin.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to verify the existence of links on remote platforms.
  • Evidence: Uses curl to check path status on the GitHub API.
  • Context: This targets a well-known service (GitHub) for legitimate verification purposes.
  • [DATA_EXPOSURE]: The instructions involve the use of the GITHUB_TOKEN environment variable for authenticated API requests.
  • Evidence: A curl command example includes an Authorization: token $GITHUB_TOKEN header.
  • Context: The skill explicitly provides security instructions to prevent credential exfiltration by warning the agent to never send the token to unverified or unexpected remote hosts derived from the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 06:04 PM
Security Audit — agent-trust-hub — brain-link-discipline