BeCreative

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands for notification and technical reasoning. It instructs the agent to use curl for sending POST notifications to http://localhost:8888/notify to indicate which workflow is active. Additionally, the TechnicalCreativityGemini3 workflow utilizes the llm CLI tool to invoke external models like gemini-3-pro-preview for complex engineering analysis.
  • [PROMPT_INJECTION]: The skill uses strong directives such as 'MANDATORY' and 'REQUIRED' to enforce specific agent behaviors, such as sending notifications before any action. These are intended for operational transparency and do not attempt to bypass safety filters or override core instructions in a malicious way.
  • [DATA_EXPOSURE]: The skill accesses local file system paths to manage its configuration. It is designed to read from ~/.claude/PAI/USER/SKILLCUSTOMIZATIONS/BeCreative/ for user preferences and reads its own workflow files from its installation directory. These operations are restricted to relevant local paths.
  • [SAFE]: No malicious patterns such as remote code downloads (e.g., curl|bash), credential exfiltration, or obfuscation were detected. All network activity is directed to localhost or trusted well-known AI services.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 01:03 AM