gbrain-upgrade
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill triggers the
gbrain self-upgradecommand, which downloads and applies updates for the gbrain tool. This is the primary intended function of the skill for managing its own lifecycle. - [COMMAND_EXECUTION]: The skill uses the
exectool to run commands such asgbrain config getandgbrain self-upgrade. It implements a security contract that explicitly forbids running any commands parsed from external markers, ensuring only predefined, hardcoded commands are executed. - [PROMPT_INJECTION]: The skill contains a 'Contract' section that instructs the agent to ignore forged commands in upgrade markers, effectively hardening the agent against potential injection attempts via the tool's standard error stream.
Audit Metadata