skills/arisng/github-copilot-fc/beads/Gen Agent Trust Hub

beads

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed as a productivity tool for managing complex task graphs. All identified behaviors align with its stated purpose of providing persistent memory for AI agents.
  • [COMMAND_EXECUTION]: The skill utilizes a custom command-line interface, bd, to manage its internal SQLite and JSONL databases. These commands are tactical and restricted to issue management functions such as create, update, list, and show.
  • [PROMPT_INJECTION]: The skill features a "Compaction Survival" mechanism (documented in SKILL.md and references/WORKFLOWS.md) where the agent is instructed to read notes and description fields from the issue database to reconstruct context after conversation history is deleted. While these fields are an ingestion point for external data that could technically contain indirect instructions, the skill handles them as trusted project metadata and provides clear guidelines on how the agent should structure and interpret this information.
  • [EXTERNAL_DOWNLOADS]: The bd sync command facilitates synchronization of the issue tracker via standard Git operations (pull and push). This is the intended behavior for team-based or multi-device task tracking and does not involve downloading untrusted executable code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 11:17 PM