ionic-enterprise-sdk-migration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes user-provided source code and configuration files, which serves as a potential vector for indirect prompt injection. 1. Ingestion points: Reads package.json and project source files (*.ts, *.tsx, *.js, *.jsx) to detect dependencies and provide code replacement guidance. 2. Boundary markers: None identified. 3. Capability inventory: The skill executes shell commands (npm, grep, npx, claude mcp add) and suggests code modifications. 4. Sanitization: None identified.
- [COMMAND_EXECUTION]: The skill uses shell commands like grep to identify code patterns and npm/npx for package management, environment synchronization, and registry configuration.
- [REMOTE_CODE_EXECUTION]: The skill recommends installing an external MCP server from a vendor-owned URL (https://mcp.capawesome.io/mcp) using the claude mcp add command to access updated documentation.
- [EXTERNAL_DOWNLOADS]: The skill configures the development environment to fetch packages from a private vendor registry (https://npm.registry.capawesome.io) and retrieves resources from vendor-controlled domains.
Audit Metadata