archlang-edit-plan
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell commands using the
archlangCLI to perform floor plan manipulations. It provides instructions to usenpx -y @chanmeng666/archlangto ensure the tool is available.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the@chanmeng666/archlangpackage, which is a resource provided by the skill's author and may be fetched from the NPM registry during execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external.archfiles.\n - Ingestion points: Content from
.archfiles is read into the agent's context through commands such asarchlang describeandarchlang validate(SKILL.md).\n - Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from following instructions potentially embedded in the file data.\n
- Capability inventory: The agent has the ability to execute shell commands (via the
archlangCLI) and modify the local file system.\n - Sanitization: The skill does not describe any methods for sanitizing the input data from the floor plan files before processing.
Audit Metadata