effect
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions require the agent to clone the repository
https://github.com/Effect-TS/effect-smolif it is not already present in the environment. This is used to provide accurate, version-specific context for code generation. - [PROMPT_INJECTION]: The skill establishes an ingestion point for external data, which constitutes an indirect prompt injection surface.
- Ingestion points: The
.opencode/references/effect-smoldirectory and existing repository files. - Boundary markers: The skill does not define specific boundary markers or instructions to ignore embedded directives in the ingested code.
- Capability inventory: The agent uses
git cloneand file-reading capabilities to process the documentation and source code. - Sanitization: No explicit sanitization or content validation is performed on the data fetched from the external repository.
Audit Metadata