darkmatter-ts-toolchain
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill directs the agent to read sensitive private key files from the user's configuration directory.
- Evidence: The command
SOPS_AGE_KEY=$(grep '^AGE-SECRET-KEY-' ~/.config/sops/age/keys.txt | head -1)is provided for deployment setup. - The file
~/.config/sops/age/keys.txtcontains master secret keys for the Age encryption tool used by SOPS. - [COMMAND_EXECUTION]: The skill defines various shell commands for the agent to execute as part of the toolchain.
- Package operations:
bun install,bun run,bun x. - Secret management interaction:
himitsu read <path>. - Deployment triggers:
STAGE=prod bun run deploy. - Local file processing: Using
grepandheadon configuration files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from changeset files, which could lead to indirect injection.
- Ingestion points: Release notes and versioning instructions in
.changeset/*.mdfiles (SKILL.md). - Boundary markers: None identified.
- Capability inventory: Shell command execution via Bun and deployment scripts.
- Sanitization: No explicit sanitization or validation of changeset content is mentioned.
Audit Metadata