bootstrap-user-management
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands such as
mix compile --warnings-as-errorsandmix phx.routes. These are used exclusively for verifying the implementation and ensuring the code compiles correctly. - [PRIVILEGE_ESCALATION]: The generated code implements a robust role-based access control (RBAC) system with three distinct tiers: :owner, :admin, and :member. Authorization checks are applied to sensitive actions, such as inviting new users or assigning administrative roles. For example, only owners are permitted to assign the 'owner' role to others.
- [DATA_EXPOSURE]: The skill implements safety guards in the membership management logic. It includes validation logic to prevent a user from removing themselves from an account and ensures that an account must always have at least one owner, preventing account lockout or orphaned records.
- [INDIRECT_PROMPT_INJECTION]: While the resulting application will process user input (email addresses), the provided code templates use Ecto changesets for strict data validation and database constraints to prevent duplicate entries and ensure data integrity. The logic is correctly scoped to the current account context, preventing cross-tenant data access.
Audit Metadata