buf-cli-lint-breaking-build
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to process Protobuf (
.proto) files and configuration files. This data ingestion surface is susceptible to indirect prompt injection, where malicious instructions could be hidden in comments or metadata within the Protobuf files to influence the agent when it reads the tool's output. - Ingestion points: Protobuf (
.proto) files,buf.yaml, andbuf.gen.yamlas described inSKILL.mdandreferences/ci-integration.md. - Boundary markers: The instructions do not specify the use of delimiters or provide warnings to the agent to ignore embedded instructions within the files being processed.
- Capability inventory: The skill facilitates shell command execution and interacts with the file system via the
bufCLI. - Sanitization: No sanitization or filtering of the content within the processed files is mentioned before the agent interacts with the tool output.
- [COMMAND_EXECUTION]: The skill describes the use of shell commands to install and run the
bufCLI tool (e.g.,buf build,buf lint,buf breaking). These commands allow the agent to perform file system operations and compilation tasks necessary for Protobuf management. - [EXTERNAL_DOWNLOADS]: The skill references the official
buf.buildservice and its associated GitHub Actions (bufbuild/buf-setup-action). It also provides instructions for downloading thebufbinary via Homebrew, Go, or direct releases from the official site for tool installation and configuration.
Audit Metadata