helios-studio
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation describes the legitimate functionality of Helios Studio, a Vite-based development environment. No malicious instructions, obfuscation, or unauthorized data access patterns were found.
- [COMMAND_EXECUTION]: The skill describes the use of
npx helios studioto start the local development server. This is the intended primary use of the tool within a project context. - [INDIRECT_PROMPT_INJECTION]: The skill mentions an integrated MCP server that allows agents to interact with project data, such as composition schemas and input props.
- Ingestion points: MCP server interaction with composition schemas and input props (SKILL.md).
- Boundary markers: Not mentioned in documentation.
- Capability inventory: CLI execution (npx), file system access (Assets Panel), and local server hosting.
- Sanitization: Not specified in the documentation.
Audit Metadata