bids-conversion
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation and execution of the bids-validator package using bun or bunx. This is the official community tool for verifying Brain Imaging Data Structure compliance.
- [COMMAND_EXECUTION]: Instructions include the use of shell commands such as cp for file management and bids-validator for dataset checks.
- [INDIRECT_PROMPT_INJECTION]: The skill contains logic to read and modify metadata in external neuroscience data files.
- Ingestion points: The update_brainvision_header function in references/eeg-bids.md reads content from .vhdr and .vmrk files.
- Boundary markers: No explicit delimiters are used for the data read from these files.
- Capability inventory: The skill possesses file read/write capabilities (open, Path.write_text) and provides CLI commands for execution.
- Sanitization: The skill uses regular expressions to isolate specific header keys, reducing the surface for injection.
Audit Metadata