bklit-studio
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill content is strictly instructional, providing a roadmap for developers to build and edit charts within a specific monorepo environment. It does not contain malicious instructions, obfuscation, or unauthorized data access patterns.
- [COMMAND_EXECUTION]: The instructions include standard development commands such as
pnpm devto start a local server. These are routine operations for a developer tool and are directed at the local repository root. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing chart data and configurations.
- Ingestion points: Data enters the system via URL states (
?chart=<slug>) and configuration files inpackages/studio/src/lib/. - Boundary markers: The skill references specific parsers in
packages/studio/src/lib/studio-parsers.tsto manage state. - Capability inventory: The skill facilitates local file edits in
packages/studioandpackages/uiand previewing them in a local browser. - Sanitization: Implementation details point toward structured state management and specific render helpers in
registry.tsxto handle property interpolation.
Audit Metadata