bootstrap-nebulex

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill automates the configuration of Nebulex, a well-known Elixir caching library. It adds the {:nebulex, "~> 2.6"} dependency to mix.exs and executes mix deps.get. These are standard project management actions for the Elixir ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes a discovery phase that reads project files to determine the application's namespace and OTP name.
  • Ingestion points: Reads local project files including mix.exs, lib/*/application.ex, and config/*.exs (SKILL.md, Phase 0).
  • Boundary markers: None; uses standard file reading to extract module names.
  • Capability inventory: The skill has the capability to write Elixir files (lib/, test/), modify configuration files (config/), and execute the mix CLI.
  • Sanitization: No specific sanitization is performed on the extracted application names, but the operations are confined to the local project context as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 06:38 PM