circuit
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to interact with the system using the
circuitCLI tool. This includes commands for running workflows, checking system readiness (circuit doctor), and managing project configuration.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the risk of processing untrusted user input by providing specific guidelines for shell-safe command construction. - Ingestion points: The
--goalargument in thecircuit runcommand, which accepts arbitrary task descriptions from the user. - Boundary markers: The instructions mandate the use of single quotes for goal text and provide escaping procedures for apostrophes.
- Capability inventory: Includes the ability to modify project files (via
fixandbuildflows), execute shell commands, and access external LLM APIs through configured connectors. - Sanitization: Guidance is provided for manual escaping of user-provided strings before they are passed to the shell.- [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies such as the
@openai/codexNode.js package. These references are to well-known, official tools from established service providers and are used for their intended purpose of providing model access.
Audit Metadata