ae-kb-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured instructions for the agent to use the
ae-cli kbcommand-line tool to perform read-only operations like listing, indexing, searching (grep), and reading document pages. These commands are used to provide business context for data analysis. - [PROMPT_INJECTION]: The skill includes instructions to prevent the agent from following embedded instructions in external data by emphasizing that conclusions must be backed by evidence and that knowledge base retrieval is a supporting workflow, not the primary task.
- Ingestion points: Content is ingested from internal knowledge bases via the
+readand+grepsubcommands ofae-cli kb(SKILL.md). - Boundary markers: The instructions provide explicit guidance to treat internal facts as optional context and to distinguish between analytical facts and retrieved evidence (SKILL.md).
- Capability inventory: The agent has the capability to execute shell commands using the
ae-clitool (SKILL.md). - Sanitization: The agent is instructed to copy paths character-for-character and treat identifiers as opaque to prevent path manipulation (SKILL.md).
- [DATA_EXFILTRATION]: While the skill accesses internal data, it contains a 'Safety Boundaries' section that explicitly prohibits the exposure of internal root paths, access tokens, or raw permission metadata. It also restricts the agent from performing destructive actions like deleting or modifying knowledge bases.
Audit Metadata