component-validator
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits external component JSON files, which serves as a potential ingestion point for untrusted data. This attack surface is mitigated by the skill's design, which restricts the agent to a read-only auditing role and enforces a structured report format.
- Ingestion points: Component JSON files read from a branch or scratch location as described in the workflow.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the audited files.
- Capability inventory: The execution environment is limited to Read, Grep, and Glob tools for the sub-agent, along with vendor-specific dxs CLI and jq tools for the orchestrator.
- Sanitization: There is no explicit sanitization of the component content mentioned before the audit process.
Audit Metadata