prototype
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using project task runners like pnpm, python, or bun to launch prototypes, granting the agent execution capabilities over scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user prompts and the existing codebase to decide the prototype logic, creating a surface for indirect injection.
- Ingestion points: Identified in SKILL.md as user prompts and surrounding code.
- Boundary markers: No specific delimiters or safety instructions are mentioned for processing these inputs.
- Capability inventory: The skill involves writing files and executing shell commands.
- Sanitization: No sanitization methods for ingested data are described.
- [DYNAMIC_EXECUTION]: LOGIC.md guides the agent to generate standalone HTML files with embedded scripts for manual user execution, which can be utilized to distribute generated logic.
Audit Metadata