create-hec-event-integration
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses user input for service names and paths to modify repository files. This ingestion surface is standard for a code-generation tool and is used within the user's controlled local environment. 1. Ingestion points: User prompts in SKILL.md (Step 1). 2. Boundary markers: Absent. 3. Capability inventory: Modifies local TypeScript files and runs test commands. 4. Sanitization: Relies on user compliance with kebab-case and PascalCase instructions.
- [COMMAND_EXECUTION]: The skill instructs the agent to run npx jest on the modified test file to ensure the integration is correctly configured. This is a common and safe developer practice within the context of the bitwarden repository.
Audit Metadata