agents-brain
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts and git commands for repository management, compatibility checks, and file symlinking. These operations are restricted to the local repository and are consistent with the skill's intended purpose of repository maintenance.- [EXTERNAL_DOWNLOADS]: The helper script
scripts/fetch-guidance.shfetches prompting documentation from official OpenAI and Anthropic websites. These are well-known technology services, and the skill uses specific, pinned URLs with integrity and redirect protections.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and reads external documentation files which could theoretically contain instructions. However, the ingestion points are limited to trusted official vendor sites (OpenAI and Anthropic), and the skill provides internal guardrails, such as repository boundary checks, to prevent malicious influence.
Audit Metadata