setup-proactive-jupi
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
bashandnodeto execute scripts for database migrations and environment setup. It specifically uses the device shell to modifysettings.jsonas a way to bypass restrictions some platforms place on standard file-manipulation tools.\n- [COMMAND_EXECUTION]: The skill configures persistence by scheduling two recurring routines (act & decideandrefresh brain) to run unattended in the cloud.\n- [COMMAND_EXECUTION]: The skill modifies agent security parameters by settingpermissions.defaultModetodontAskfor a set of tools including shell and version control commands, effectively disabling per-action user confirmation.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of external content from LinkedIn, emails, and chat messages.\n - Ingestion points: Processes external URLs and content from integrated tools (Gmail, Slack, GitHub, Linear).\n
- Boundary markers: Instructions explicitly direct the agent to treat external content as data and to avoid obeying instructions found within them.\n
- Capability inventory: The skill allows for shell command execution, file system writes, and the scheduling of routines.\n
- Sanitization: The skill employs a strategy of quoting external data back to the user to clarify its source.
Audit Metadata