flow-ptr-app
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches code and configuration information from official sources, including cloning the
tk-multi-starterapptemplate from theshotgunsoftwareGitHub repository. - [EXTERNAL_DOWNLOADS]: The instructions utilize the GitHub API to search for existing repositories within the product's official organization to identify reusable components and architectural patterns.
- [COMMAND_EXECUTION]: The guide involves executing standard lifecycle commands using the
tankCLI utility andgitfor version control, which are standard requirements for Toolkit app development and environment management. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data, including user-defined requirements and project metadata retrieved from APIs. It mitigates potential risks by incorporating a dedicated validation phase (Phase 2.2) to check specifications for security, data privacy, and logical consistency before implementation.
Audit Metadata