beads
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'beads' CLI tool via 'cargo install', which is a standard method for installing Rust-based utilities from the crates.io registry.
- [INDIRECT_PROMPT_INJECTION]: The skill processes task-related data that may contain untrusted instructions.
- Ingestion points: Task titles, descriptions, and notes are read using 'bd ready', 'bd list', and 'bd show' (SKILL.md).
- Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions within the task data.
- Capability inventory: The agent can create tasks, update issue status, and sync changes to a remote Git repository.
- Sanitization: No sanitization or escaping of task content is mentioned in the workflow.
- [PERSISTENCE]: The 'bd hooks install' command modifies the local Git repository's hooks to enable automatic synchronization on commit, which is a standard persistent execution mechanism for developer tools.
- [COMMAND_EXECUTION]: The skill relies on executing the 'bd' CLI tool to manage local issue state and Git integration.
Audit Metadata