generate-ors-env
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the use of the
openrewardandpydanticlibraries, which are standard packages for this domain and are retrieved from the official PyPI registry during installation. - [INDIRECT_PROMPT_INJECTION]: The skill defines a protocol for environments to ingest task specifications, which creates an inherent attack surface where untrusted task data could potentially influence agent behavior.
- Ingestion points: The
task_specdictionary used inserver.pyand the list of tasks defined intasks.py. - Boundary markers: The templates do not specify mandatory delimiters, leaving boundary enforcement to the implementer's specific environment logic.
- Capability inventory: Generated code includes
@tooldecorated functions in theEnvironmentclass which are callable by the agent. - Sanitization: The provided scaffolding does not include default sanitization for task data, which is typical for a low-level framework generator.
- [SAFE]: The skill provides guidance on managing sensitive keys like
E2B_API_KEYby recommending platform-specific secret storage instead of insecure local environment files.
Audit Metadata