sync
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
brain.pyusinguv runto initialize data and log synchronization events. This is a standard procedure for local state management within an agent's project environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes data (policy and hacktivity) fetched from external bug bounty platforms.
- Ingestion points: Reading of
scope.yamlandhacktivity.mdin Step 3. - Boundary markers: No explicit delimiters or instructions are used to separate third-party data from the agent's core instructions.
- Capability inventory: The skill has command execution capabilities via
uv runand file read access. - Sanitization: No sanitization or filtering of the fetched markdown or YAML content is performed before the agent processes it for summarization.
Audit Metadata