form-creator
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
dxs(Datex CLI) andjqtools to manage configuration lifecycles. - Evidence: Commands such as
dxs configuration get,dxs configuration validate,dxs configuration upsert, andjq .json envelope.json > body.jsonare used to retrieve, process, and update platform data. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and modifying external JSON configuration data that could contain malicious instructions.
- Ingestion points: Data is retrieved into
envelope.jsonvia thedxs configuration getcommand. - Boundary markers: No specific delimiters are used to isolate ingested data from agent instructions, though the data format is structured JSON.
- Capability inventory: The skill possesses the ability to write and update platform configurations via
dxs configuration upsert. - Sanitization: The instructions recommend running
dxs configuration validateto check the schema and integrity of the modified JSON before pushing changes. - [COMMAND_EXECUTION]: The skill involves the dynamic generation of TypeScript expressions and logic flows (
ExecuteCodeActivity) to be embedded within the form configurations. - Evidence: Detailed instructions and references (e.g.,
references/forms.md) describe how to author code strings for field validation, initialization, and toolbar actions which are executed by the platform runtime.
Audit Metadata