teamcity-cli
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates shell command execution on local and remote systems through the
teamcity agent execandteamcity agent termcommands, and interacts with the TeamCity server via its CLI. - [DATA_EXFILTRATION]: Provides functionality to retrieve stored secrets and tokens using
teamcity project token put/getand download build artifacts withteamcity run download. - [REMOTE_CODE_EXECUTION]: Includes native support for executing arbitrary code on TeamCity build agents through the CLI's agent management subcommands.
- [PROMPT_INJECTION]: Identified an indirect prompt injection surface in the
babysit-buildautonomous agent. - Ingestion points: The agent reads raw build logs (
teamcity run log --raw) and test outputs (teamcity run tests) to diagnose failures. - Boundary markers: No specific delimiters or instructions to ignore embedded commands in logs are defined.
- Capability inventory: The agent has
Bash,Write, andAgentpermissions, enabling it to modify the repository and execute commands on agents to apply fixes. - Sanitization: No evidence of sanitization or validation of the log content before it influences agent decisions.
Audit Metadata