monitor
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Python script
tools/brain.pyusinguv runto log summaries of monitoring results. This script is located via the$CLAUDE_PROJECT_DIRenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its monitoring routine, creating a surface for indirect prompt injection.
- Ingestion points: The skill analyzes external host discovery data, JavaScript bundles, API response schemas, and program scope text fetched from the platform (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions to treat ingested content as data rather than instructions within the logic.
- Capability inventory: The skill has the capability to execute shell commands using
uv runfor logging purposes (SKILL.md). - Sanitization: The skill does not describe any sanitization, validation, or escaping of the external data before it is processed by the agent or logged to the 'brain' tool.
Audit Metadata