local-first-app

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided application requirements to generate code and data schemas.
  • Ingestion points: User requests to build or modify an app (e.g., "build me a local app to track my game backlog") in SKILL.md.
  • Boundary markers: Absent. The instructions do not provide specific delimiters or warnings to ignore instructions embedded within user-provided requirements.
  • Capability inventory: The agent is instructed to write files, manage SQLite schemas, and run build/packaging commands.
  • Sanitization: Absent. No sanitization methods for user-provided entity names or logic are specified in the instructions.
  • [COMMAND_EXECUTION]: The documentation in references/PACKAGING.md describes the use of shell commands for the application build and distribution process.
  • Evidence: Mentions deno compile, deno desktop, xattr -dr com.apple.quarantine, and codesign. These are presented as standard development steps for packaging and signing desktop binaries.
  • [EXTERNAL_DOWNLOADS]: The skill references technical documentation from official sources.
  • Evidence: The skill links to Deno's official runtime documentation (docs.deno.com) for desktop application development guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:51 PM