teamkb
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process local Markdown files and conversation session data to generate knowledge base entries.
- Ingestion points: Files are identified using
Globand content is accessed viaReadas described inSKILL.md. - Boundary markers: The instructions explicitly direct the agent to reject personal preferences, ephemeral steps, and content already present in READMEs.
- Capability inventory: The skill uses
mcp__teamkb__teamkb_proposeandmcp__teamkb__teamkb_importto write data to local storage. - Sanitization: The workflow requires using
Grepto scan for secret markers and necessitates a final confirmation from the user throughAskUserQuestionbefore any batch import occurs. - [EXTERNAL_DOWNLOADS]: The documentation references an external GitHub repository belonging to the author for the required backend server components.
- Evidence:
https://github.com/jeremylongshore/bobs-big-brain-registrarinSKILL.md. - This repository provides the source code and build instructions for the MCP server used by the skill.
Audit Metadata