webup-buddy-reroll
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
reroll.mjsscript executes theclaude --versioncommand to ensure the current environment supports the necessary companion features. - [EXTERNAL_DOWNLOADS]: The skill employs
npx -y bunto download and run the Bun runtime. Bun is a well-known service, and its use here is for executing the skill's local scripts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to customize companion metadata.
- Ingestion points: User-provided strings for names and personality descriptions.
- Boundary markers: The skill does not use specific delimiters or ignore-instructions for user-provided data.
- Capability inventory: The skill can modify the agent's local configuration file and run subprocesses.
- Sanitization: User input is interpolated directly into the JSON configuration file without validation.
Audit Metadata