local-first-app
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided application requirements to generate code and data schemas.
- Ingestion points: User requests to build or modify an app (e.g., "build me a local app to track my game backlog") in SKILL.md.
- Boundary markers: Absent. The instructions do not provide specific delimiters or warnings to ignore instructions embedded within user-provided requirements.
- Capability inventory: The agent is instructed to write files, manage SQLite schemas, and run build/packaging commands.
- Sanitization: Absent. No sanitization methods for user-provided entity names or logic are specified in the instructions.
- [COMMAND_EXECUTION]: The documentation in
references/PACKAGING.mddescribes the use of shell commands for the application build and distribution process. - Evidence: Mentions
deno compile,deno desktop,xattr -dr com.apple.quarantine, andcodesign. These are presented as standard development steps for packaging and signing desktop binaries. - [EXTERNAL_DOWNLOADS]: The skill references technical documentation from official sources.
- Evidence: The skill links to Deno's official runtime documentation (
docs.deno.com) for desktop application development guidelines.
Audit Metadata