skills/dfinity/icskills/sns-launch/Gen Agent Trust Hub

sns-launch

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the sns-testing repository from DFINITY's official GitHub account (github.com/dfinity/sns-testing) to facilitate local development and testing. This is a recognized vendor resource used within the expected scope of the skill.
  • [COMMAND_EXECUTION]: Instructs the user to execute dfx and icp command-line tools to manage canisters, validate configuration files, and submit governance proposals to the NNS. These tools are standard for the Internet Computer ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-defined configuration from sns_init.yaml (e.g., proposal titles and summaries). While this content is interpolated into NNS proposals, the risk is mitigated by the architectural requirement of a community vote (human-in-the-loop) before the configuration is enacted, serving as a robust sanitization step for the provided metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:50 PM
Security Audit — agent-trust-hub — sns-launch