pjangler
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a scaffolding engine that interpolates project metadata and context variables into file templates, creating a surface for indirect prompt injection.
- Ingestion points: Input variables such as directory names (
targetDir) and other fields in theCommandContextare interpolated into files likepackage.jsonandpyproject.tomlas shown inreferences/command-interface.md. - Capability inventory: The
writeFileandcreateDirectorymethods in theCommandbase class provide the ability to write arbitrary content and structures to the local file system. - Boundary markers: No specific delimiters or safety instructions are provided in the template string examples to isolate interpolated content from the surrounding file structure.
- Sanitization: The reference examples do not demonstrate explicit sanitization or validation of context variables before they are written to the disk.
- [EXTERNAL_DOWNLOADS]: The skill references external templates for project scaffolding.
- The
RunCopierTemplatelogic resolves and fetches project templates from the author's GitHub repository athttps://github.com/delorenj/hermes-agent-template. - [COMMAND_EXECUTION]: The skill documentation includes instructions for running command-line tools to test and initialize subsystems.
- Development and testing involve executing the local CLI source using the
bunruntime. - Recipe definitions suggest that users run initialization commands such as
bun install,mise install, ordocker-composeafter the scaffolding process is complete.
Audit Metadata