brag
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and aggregate data from repository history and issue trackers, which are sources of potentially untrusted content.
- Ingestion points: Reads git commits, diffs, merged change requests, closed issues, and workspace files like
PLAN.mdandCONTEXT.mdacross the current repository. - Boundary markers: The instructions do not specify any delimiters or safety warnings to ensure the agent ignores instructions that might be embedded within commit messages or issue bodies.
- Capability inventory: The skill has the capability to read extensive repository data and write structured updates to a local 'brag document' file.
- Sanitization: No sanitization logic is defined to filter out or escape control characters or instructional text found within the repository evidence.
Audit Metadata