helios-studio
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references the
npx helios studiocommand, which downloads and executes the 'helios' package from the public npm registry. This is consistent with the vendor's stated development workflow. - [COMMAND_EXECUTION]: Provides instructions to run a shell command to initiate a local Vite-based development server, typically on port 5173, for project debugging and previewing.
- [PROMPT_INJECTION]: The skill's MCP server ingests external composition schemas and input props (Ingestion points). The documentation does not specify the use of boundary markers or sanitization logic for this data. Given the server's ability to trigger renders and create new compositions (Capability inventory), this ingestion surface is susceptible to indirect prompt injection from malformed project data.
Audit Metadata