dev-environments
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project requirements from a PLAN.md file to determine environment configurations. * Ingestion points: The PLAN.md file is parsed in Step 1 of the skill workflow. * Boundary markers: Instructions do not specify delimiters to separate untrusted plan content from agent instructions. * Capability inventory: The skill generates configurations, writes setup scripts, and executes docker-compose build. * Sanitization: The skill instructions include a guardrail against dependency hallucination and unverified scripts.
- [COMMAND_EXECUTION]: The skill performs environment verification by executing shell commands. * Evidence: Step 4 of the workflow involves running docker-compose build to verify the generated environment.
- [EXTERNAL_DOWNLOADS]: The devcontainer template fetches official features from the GitHub Container Registry and installs dependencies via npm. * Evidence: The template references ghcr.io/devcontainers/features/ and includes a postCreateCommand for npm install. These are standard resources for development environment setup.
Audit Metadata