darkmatter-ts-toolchain
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides instructions to retrieve an encryption key from the local path
~/.config/sops/age/keys.txtto set theSOPS_AGE_KEYenvironment variable. This is a legitimate requirement for using the SOPS tool in the specified deployment workflow. - [CREDENTIALS_UNSAFE]: The documentation explicitly instructs against hardcoding secrets, recommending the use of
himitsuandSOPSfor secret management, which is a recognized security best practice. - [COMMAND_EXECUTION]: The toolchain employs standard Bun commands (
bun install,bun run,bun x) for dependency management and task execution within the repository. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to process repository content for tasks like writing, fixing, and building code, which creates a potential surface for indirect prompt injection if source files contain malicious instructions.
- Ingestion points: Repository source code and configuration files.
- Boundary markers: None specified in the instructions.
- Capability inventory: Shell command and script execution via the Bun package manager.
- Sanitization: None specified.
Audit Metadata