check
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
just checkcommand in the shell to perform project linting and quality tasks.\n- [EXTERNAL_DOWNLOADS]: Suggests the installation of additional skills from the vendor's repository (agoodway/GoodSkills) using thenpx skills addcommand.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it executes logic defined in a project'sjustfilewhich could be modified by a malicious actor.\n - Ingestion points: Project
justfilefound in the root directory.\n - Boundary markers: Absent; the skill does not verify the safety of the
checkrecipe before execution.\n - Capability inventory: Shell command execution via the
justutility.\n - Sanitization: None; the recipe content is passed directly to the system for execution.
Audit Metadata