tech-stack-evaluator
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external URLs from platforms like GitHub and npm to perform ecosystem and health analysis. This ingestion of untrusted external data represents a surface for indirect prompt injection, where malicious instructions embedded in a repository's documentation could attempt to influence the agent's reasoning. The skill maintains a low risk profile by treating this data numerically for scoring purposes, but the agent should remain cautious when parsing content from these external sources.
- [METADATA_POISONING]: The skill identifies its author as 'Claude Skills Factory' and includes formal copyright notices. While this branding is professional, it could potentially be mistaken for an official Anthropic resource. However, analysis of the underlying code confirms it is a legitimate third-party analytical tool without deceptive functional behavior.
Audit Metadata