update-team
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing external data to generate agent configurations.
- Ingestion points: Reads all files in
.vibeRig/requirements/and retrieves task descriptions from Linear issues. - Boundary markers: No delimiters or instructions are specified to help the agent distinguish between project data and potential embedded instructions.
- Capability inventory: Executes
agent-creatorto define new agents, updates the project configuration file (project.yaml), and removes existing agent files (.toml) upon user confirmation. - Sanitization: There is no evidence of filtering or escaping of the ingested data before it is used to formulate instructions for new agents.- [COMMAND_EXECUTION]: Uses standard shell utilities for local filesystem analysis and integrity checks.
- Evidence: Employs
findandlsfor directory traversal andgrepfor validating the schema of generated agent files.
Audit Metadata