effect-language-service-cc
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!command`` syntax inSKILL.mdto execute thescripts/probe-els.shscript when the skill is loaded. This script gathers environment metadata by reading local configuration files likepackage.jsonandtsconfig.jsonto identify the version and patch status of the Effect Language Service. This is a benign use of dynamic context for environmental discovery. - [COMMAND_EXECUTION]: The instructions guide the agent to perform various command-line operations via
Bash, including runningeffect-language-service diagnostics,quickfixes, andcodegen. It also includes apatchcommand that modifies the localnode_modules/typescriptinstallation to integrate Effect diagnostics. These operations are consistent with the skill's primary purpose and represent standard developer workflows. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from CLI tools that may reflect content from source code, such as diagnostics on code comments. This represents a potential surface for indirect prompt injection. Ingestion points: CLI output from
diagnostics,quickfixes,overview, andlayerinfocommands. Boundary markers: Absent in the provided workflows. Capability inventory: Access toBash,Read,Glob, andGrep. Sanitization: Theels_cleanhelper function strips ANSI formatting but does not validate the content of the tool's output.
Audit Metadata