create-client-tool
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a boilerplate and instructions for scaffolding an 'AtlasTool'. It follows standard development practices for React and TypeScript applications.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a surface where user-controlled or agent-controlled input (parameters) is processed by the application. However, it explicitly advocates for the use of TypeBox (
@sinclair/typebox) for compile-time types and runtime validation, which serves as a robust sanitization and boundary-enforcement mechanism against malformed or malicious inputs. - [SAFE]: All file operations requested in
allowed-tools(Read, Glob, Grep, Edit, Write) are consistent with the stated purpose of scaffolding and modifying application source code files.
Audit Metadata