seed-api-parity
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The analysis script reads local source code to extract component definitions. It implements a security check using
realpathand relative path comparison inscripts/api-parity.tsto prevent access to files outside the project directory. - [COMMAND_EXECUTION]: The skill provides a CLI command to run the parity check. The script uses regex and manual parsing to inspect code without executing it.
- [INDIRECT_PROMPT_INJECTION]: The tool processes component code as external input. Ingestion points: Source files read via
readFileinscripts/api-parity.ts. Boundary markers: The analysis result is a structured JSON object. Capability inventory: The skill is limited to reading files and has no network or write access. Sanitization: Path validation ensures only files within the @seed-design/project repository are processed.
Audit Metadata