about-oracle
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local system utilities including
git,gh(GitHub CLI), andbunto extract project metrics. Specifically, it executes a local TypeScript script (fleet-scan.ts) to generate a 'family tree' of the project's instances. - [DATA_EXFILTRATION]: Accesses the local file system to read project files such as
src/cli/index.tsand inspects the directory structure in$HOME/Code/github.com/Soul-Brews-Studio/to retrieve Git history and repository counts. - [EXTERNAL_DOWNLOADS]: Communicates with GitHub servers using the
ghtool to list repositories and fetch issue content specifically from theSoul-Brews-Studioorganization. - [PROMPT_INJECTION]: The skill ingests external content from GitHub issues, which represents a potential surface for indirect prompt injection.
- Ingestion points: External data is retrieved via
gh issue view 60 --repo Soul-Brews-Studio/arra-oracle-v3. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within the issue body.
- Capability inventory: The skill has the ability to execute local scripts via
bun, run shell commands, and read local files. - Sanitization: The skill uses basic filtering (via
grepandhead) but does not perform comprehensive sanitization or validation of the fetched external text.
Audit Metadata