brainstorming
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill launches a local Node.js server using the scripts provided to manage an interactive companion UI.
- [DATA_EXFILTRATION]: User-generated events from the web interface are sent to the local server via WebSockets and printed to stdout for the agent to consume.
- [PROMPT_INJECTION]: The skill processes data from a browser-based companion which introduces a surface for indirect prompt injection. Ingestion points: browser input received via WebSocket in server.cjs. Boundary markers: none. Capability inventory: local script execution. Sanitization: none performed on WebSocket message strings before logging.
Audit Metadata