hackathon-setup

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill sequences shell commands including node, npm, git, docker compose, and a project-specific hackathon CLI tool to manage the setup process.
  • [EXTERNAL_DOWNLOADS]: Installs the @antasphere/hackathon CLI package from the public NPM registry. It also directs users to the official Node.js website for environment requirements.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CLI outputs.
  • Ingestion points: Outputs from hackathon connect, hackathon doctor, and hackathon event status in SKILL.md.
  • Boundary markers: Commands are strictly required to use the --json flag to ensure structured data parsing.
  • Capability inventory: Includes capabilities for package installation, file system access (cloning repos, writing .env), and managing Docker containers.
  • Sanitization: The skill instructs the agent to read specific keys from the JSON output and handle predefined exit codes, limiting the impact of arbitrary text injection.
  • [SAFE]: The skill includes explicit security constraints: it forbids the agent from printing .env files, prohibits asking users for secrets in chat, and requires that administrative actions (like sudo) or authentication (like gh auth login) be performed manually by the user rather than the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 04:52 PM