gpc-train
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
gpcCLI, such asgpc train start,gpc train status, andgpc train abort. These commands are used to manage the release train lifecycle and are legitimate for the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a local configuration file,
.gpcrc.json, which defines release stages and gates. Although this is an ingestion point for user-controlled data, it represents standard configuration for a developer tool. - Ingestion points:
.gpcrc.jsonin the project root and~/.cache/gpc/train-*.jsonstate file. - Boundary markers: None present; the skill expects structured JSON data.
- Capability inventory: Execution of
gpc trainshell commands for release management. - Sanitization: No explicit validation or sanitization of configuration content is mentioned.
Audit Metadata