neural-train
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions recommend the use of
npx @claude-flow/cli@latest, which fetches and executes code from the npm registry. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow for learning from task completions, which introduces a potential surface for indirect prompt injection from processed task data.
- Ingestion points: Task context and steps are recorded using
mcp__plugin_ruflo-core_ruflo__hooks_intelligence_trajectory-startandmcp__plugin_ruflo-core_ruflo__hooks_intelligence_trajectory-step. - Boundary markers: There are no instructions provided to the agent regarding delimiters or safety warnings for the ingested task data.
- Capability inventory: The skill uses
Bashand specialized tools for training, optimizing, and compressing neural patterns. - Sanitization: No data sanitization or validation steps are mentioned before the trajectory data is processed for learning.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute MCP tool commands and external CLI utilities.
Audit Metadata