accint-frames

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes 'brain_frames' checkpointed by headless runs, which include 'retrieved context'. This context is a primary ingestion point for external data that could influence agent behavior.
  • Ingestion points: Data retrieved from the acc frames command, specifically the 'typed hole' and 'retrieved context' within deliberation frames.
  • Boundary markers: The instructions lack specific delimiters or boundary markers to isolate potentially adversarial instructions within the retrieved context.
  • Capability inventory: The skill utilizes the acc_act tool to submit proposals, allowing the processed data to drive actions in the external system.
  • Sanitization: No sanitization or validation logic is specified for the external context before it is deliberated upon.
  • [COMMAND_EXECUTION]: The skill requires the use of the acc CLI tool and associated MCP verbs to perform its core functions.
  • Evidence: Instructions for executing acc frames to list the queue and acc_act to submit calibrated proposals.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 12:52 AM
Security Audit — agent-trust-hub — accint-frames