ralph-tui-create-beads-rust
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that handles external, untrusted inputs, creating an indirect prompt injection surface.
- Ingestion points: Processes external Product Requirement Documents (PRDs) provided as markdown text inputs within the context of
SKILL.mdworkflows. - Boundary markers: Present. The documentation includes explicit security instructions to use single-quoted HEREDOC delimiters (
<<'EOF') to isolate text payloads and prevent the underlying shell from evaluating embedded backticks, variables, or expressions. - Capability inventory: Involves executing local command-line operations via the
br(beads-rust) utility tool (br create,br dep add, andbr sync). - Sanitization: Handled structurally by wrapping user-defined text into static literal HEREDOC blocks to suppress runtime command execution hazards.
Audit Metadata