scan-effect-solutions
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the 'effect-solutions' CLI tool (e.g., 'effect-solutions list', 'effect-solutions show') to retrieve compliance rules and documentation necessary for the audit.
- [INDIRECT_PROMPT_INJECTION]: The skill audits external repository code, which serves as an untrusted data ingestion surface for the agent. 1. Ingestion points: The skill reads TypeScript source files, 'tsconfig.json', and test files from the target repository. 2. Boundary markers: No explicit delimiters or instructions are used to isolate untrusted code content from agent instructions. 3. Capability inventory: The agent executes local CLI commands and searches project files to identify specific coding patterns. 4. Sanitization: No content filtering or escaping is applied to the ingested code before the agent processes it for the audit report.
Audit Metadata