packages
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files (JSON format) and uses them to generate product packages. While the skill processes external data, it operates within a constrained commercial consulting context and uses standard local tools.
- Ingestion points: Reads from
products/,markets/,customers/, andcontext/directories within the project structure (SKILL.md). - Boundary markers: None specified in the instructions.
- Capability inventory: Utilizes
Read,Write,Edit,Glob,Grep, andBashtools for file manipulation and executing internal scripts. - Sanitization: No explicit data sanitization or escaping mechanisms are mentioned for the ingested data.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute specific shell scripts (
project-status.sh,validate-entities.sh) located within the plugin's root directory. These scripts are used for status checking and schema validation. The resolution of the plugin root directory uses standard shell commands to locate the installed plugin cache.
Audit Metadata