discord-bot-architect
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or code snippets.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices for credential management by using environment variables (
process.env.DISCORD_TOKEN,os.environ["DISCORD_TOKEN"]) and recommending.envfiles for local development. It explicitly identifies hardcoding tokens as a critical issue in its documentation. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known software libraries including
discord.jsandpycord. - [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by processing external user data from Discord interactions.
- Ingestion points: Discord interaction objects (
interactionin JS,ctxin Python). - Boundary markers: None present in the simplified examples.
- Capability inventory: Code execution is limited to Discord API responses (
interaction.reply,ctx.respond) with no shell or file system access shown. - Sanitization: Not implemented in the basic templates provided.
Audit Metadata