dmc-py
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
fetch_docs.pyscript fetches documentation data fromhttps://www.dash-mantine-components.com/assets/llms.txt. This is a standard utility function that retrieves official technical references to assist with code generation and component search. - [COMMAND_EXECUTION]: The skill performs controlled shell operations using the
subprocessmodule: fetch_docs.pydynamically installs thehttpxpackage viapipif it is not present in the environment.component_search.pyexecutes the localfetch_docs.pyscript to perform online searches. These operations are hardcoded or use argument lists, preventing arbitrary command injection.- [PROMPT_INJECTION]: The skill ingests documentation from an external URL which is then searched and provided to the agent as context. This creates a surface for indirect prompt injection if the remote documentation were to be compromised, although the current source is the official technology domain.
- [SAFE]: No malicious patterns such as credential theft, multi-layer obfuscation, or persistence mechanisms were detected. File system activities are limited to project scaffolding and standard caching within the user's local directory.
Audit Metadata