sast-brakeman
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
brakemancommand-line tool. This is the core functionality for performing security analysis on Ruby on Rails applications. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of scan results which introduces a potential attack surface where malicious content within the scanned application could influence the agent's summary. 1. Ingestion points:
brakeman-results.jsonfile generated from the target application root. 2. Boundary markers: Absent. 3. Capability inventory: Command execution (brakeman) and file reading. 4. Sanitization: Absent.
Audit Metadata