can-opener
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several shell operations to manage Elixir projects, including initializing projects with
mix new, fetching dependencies withmix deps.get, compiling code withmix compile, and running tests viamix test. It also uses filesystem commands likecpto manage OpenAPI specifications andgrepto locate existing modules. - [EXTERNAL_DOWNLOADS]: The skill configures projects to download the
can_openerlibrary from the author's repository athttps://github.com/agoodway/can_opener.git. It also supports fetching OpenAPI specifications from user-provided URLs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from an OpenAPI JSON file (provided via a path or URL) and uses it to generate Elixir function names, schemas, and logic. This creates a surface for indirect prompt injection, as a malicious specification could attempt to influence the agent's behavior during the scaffolding, code discovery, or verification steps. Evidence: Ingestion of
openapi.jsoninSKILL.mdand subsequent execution ofmix runandmix teston the generated output. - [DYNAMIC_EXECUTION]: The skill generates Elixir source code (
lib/<package_name>.exandtest/<package_name>_test.exs) based on the provided OpenAPI spec. It then invokes the Elixir compiler and runtime to build and verify the generated code.
Audit Metadata