bookstrap-status
Fail
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes hardcoded credentials in the Bash command used to interact with the database. Specifically, it uses
--user root --pass rootin thesurreal sqlcommand sequence. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute multiple shell commands, including: - Health checks using
curlagainstlocalhost:2665. - Database interaction using the
surrealCLI tool. - File system checks for
BRD.mdusing shell conditionals. - [DATA_EXPOSURE]: The skill accesses project files like
BRD.mdandbookstrap.config.jsonto extract project metadata and configuration details.
Recommendations
- AI detected serious security threats
Audit Metadata