meta-config-stack-detect
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the platform's own CLI tools (such as
agents-inc search --help) to check for feature flags and verify the environment before attempting to fetch the skill catalog. This command usage is scoped to the platform's internal tools and does not involve untrusted input interpolation into the shell. - [PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted project files such as
package.json, lockfiles, and configuration files. It mitigates indirect injection risks by enforcing a 'two-signal rule' for evidence verification, performing strict mapping against an independently acquired catalog at runtime, and delegating all final configuration decisions to a human user via a confirmation surface.
Audit Metadata