bundle-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines standard developer workflows for measuring bundle composition and size using project-local commands (
pnpm bundle-compare,pnpm bundle-analyze). - [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points where the agent reads data from
packages/tools/bundle/README.mdandtmp/bundle-stats.txtto report findings. - Ingestion points:
packages/tools/bundle/README.md,tmp/bundle-stats.txt(SKILL.md). - Boundary markers: None present.
- Capability inventory: Execution of local
pnpmscripts (SKILL.md). - Sanitization: None present.
- Analysis: This is a standard operational surface for a build-analysis tool and does not represent a significant risk.
Audit Metadata