NodeJS
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute various system and runtime diagnostic commands, such as
node,npm,lsof,kill, andps. These tools are necessary for the skill's primary function of Node.js process management and troubleshooting. - [INDIRECT_PROMPT_INJECTION]: The skill maintains persistent state by reading from local files, creating a surface where modified file content could influence the agent's behavior.
- Ingestion points: The skill reads user preferences and historical context from
~/Clawic/data/nodejs/config.yamland~/Clawic/data/nodejs/memory.mdduring initialization. - Boundary markers: There are no explicit instructions to treat the content of these files as data only or to ignore embedded instructions.
- Capability inventory: The agent has access to shell command execution (e.g.,
node,npm,kill), filesystem operations, and network utilities. - Sanitization: The skill lacks validation or sanitization mechanisms for the data retrieved from its configuration and memory files.
Audit Metadata