component-scaffolder
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
dxsCLI to interact with the Datex Studio platform. It executes commands such asdxs configuration get,dxs configuration validate, anddxs configuration upsertto manage component lifecycles on a specified branch. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes external input to generate configuration files. 1. Ingestion points: User-provided
NameandDescriptionstrings (SKILL.md, Workflow step 1). 2. Boundary markers: None identified; user input is directly placed into thebody.jsontemplate. 3. Capability inventory: The skill has the ability to write to remote branches viadxs configuration upsert(SKILL.md, Workflow step 7). 4. Sanitization: The skill validates that the description is 100 characters or less to comply with database constraints, but does not perform content sanitization.
Audit Metadata