brain-link-discipline
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
git ls-files,git rev-parse, andgit remote get-urlto retrieve repository metadata and file paths for link construction. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto perform existence checks onapi.github.comfor verified links. This targets a well-known service and is used for metadata verification. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting file paths from subagents. It mitigates this by requiring the agent to mechanically derive paths using git and verifying their existence before presenting them to the user. * Ingestion points: Subagent task completions and git repository metadata. * Boundary markers: None explicitly mentioned for subagent inputs. * Capability inventory: Execution of git and curl commands, and filesystem reads. * Sanitization: Forced mechanical path derivation and HTTP existence verification.
Audit Metadata