hackathon-setup
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill sequences shell commands including
node,npm,git,docker compose, and a project-specifichackathonCLI tool to manage the setup process. - [EXTERNAL_DOWNLOADS]: Installs the
@antasphere/hackathonCLI package from the public NPM registry. It also directs users to the official Node.js website for environment requirements. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CLI outputs.
- Ingestion points: Outputs from
hackathon connect,hackathon doctor, andhackathon event statusinSKILL.md. - Boundary markers: Commands are strictly required to use the
--jsonflag to ensure structured data parsing. - Capability inventory: Includes capabilities for package installation, file system access (cloning repos, writing
.env), and managing Docker containers. - Sanitization: The skill instructs the agent to read specific keys from the JSON output and handle predefined exit codes, limiting the impact of arbitrary text injection.
- [SAFE]: The skill includes explicit security constraints: it forbids the agent from printing
.envfiles, prohibits asking users for secrets in chat, and requires that administrative actions (likesudo) or authentication (likegh auth login) be performed manually by the user rather than the agent.
Audit Metadata