accint-frames
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes 'brain_frames' checkpointed by headless runs, which include 'retrieved context'. This context is a primary ingestion point for external data that could influence agent behavior.
- Ingestion points: Data retrieved from the
acc framescommand, specifically the 'typed hole' and 'retrieved context' within deliberation frames. - Boundary markers: The instructions lack specific delimiters or boundary markers to isolate potentially adversarial instructions within the retrieved context.
- Capability inventory: The skill utilizes the
acc_acttool to submit proposals, allowing the processed data to drive actions in the external system. - Sanitization: No sanitization or validation logic is specified for the external context before it is deliberated upon.
- [COMMAND_EXECUTION]: The skill requires the use of the
accCLI tool and associated MCP verbs to perform its core functions. - Evidence: Instructions for executing
acc framesto list the queue andacc_actto submit calibrated proposals.
Audit Metadata