constructive-harness
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently utilizes shell commands to manage the project environment, including
pnpm installfor dependency management,chmod +xto make scripts executable, andnode -escripts for programmatic modification of JSON configuration files (e.g., inbrief-intake.mdandtools.md). It also usesnohupto launch long-running background processes such as development servers. - [INDIRECT_PROMPT_INJECTION]: The 'autonomous-inference mode' described in
references/brief-intake.mdingests untrusted data from the user's initial launch prompt or theBRIEF.mdfile to automatically define application entities, fields, and feature lists. This ingestion point lacks explicit boundary markers or sanitization, and is combined with significant capabilities including file-write access, shell command execution, and database provisioning tools. - [DYNAMIC_EXECUTION]: In
references/init.md, the skill grants execution permissions to and runs locally created or copied shell scripts (./.constructive/init.sh) to initialize the project state.
Audit Metadata