selector-creator
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dxsCLI tool andjqfor fetching, validating, and updating platform configurations. - Evidence: Shell commands such as
dxs configuration upsert,dxs configuration get, andjq .jsonare used inSKILL.mdfor standard development lifecycle tasks. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and processing data from other agent skills.
- Ingestion points: Requirements briefs from the
requirements-gatheringskill and schema metadata from theschema-explorerskill as described inSKILL.md. - Boundary markers: No specific delimiters or boundary markers are defined in the instructions to separate untrusted data from instructions.
- Capability inventory: The skill has the capability to execute shell commands and modify configuration files via the
dxsCLI. - Sanitization: The skill does not implement explicit sanitization or escaping logic for external content before using it to generate configurations.
Audit Metadata