appbuilder-cicd-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external workspace configuration data to generate CI/CD pipelines, creating a potential surface for indirect prompt injection through manipulated configuration files. Evidence: The agent is instructed in SKILL.md to process user-supplied 'workspace.json' files using the 'aio app use' command. Boundary markers are currently absent in the generated GitHub Action templates to explicitly separate configuration data from execution instructions. Capability inventory includes 'Bash' for command execution and 'Write'/'Edit' for file management. Sanitization is limited to structural validation via 'jq' during the extraction of values from the workspace configuration.
- [COMMAND_EXECUTION]: The skill uses the Adobe I/O CLI ('aio') and npm to manage App Builder projects, which is the standard and expected developer workflow for this platform.
Audit Metadata