catalyst-agent-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Diagrid libraries and adapters across several standard package registries: npm (
@diagrid/agent-mastra), PyPI (diagrid), NuGet (Diagrid.AI.Microsoft.AgentFramework), and Maven (io.diagrid:diagrid-spring-ai-starter). These are vendor-owned resources used for platform integration. - [COMMAND_EXECUTION]: Instructions include standard package management commands (e.g.,
npm install,pip install,go get) and the use of the vendor CLI tool (diagridpy) for project initialization. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read repository metadata files (such as
package.json,pyproject.toml, andgo.mod) to automatically detect the project language and framework. This is a standard local data ingestion surface for developer tools. - [DATA_EXPOSURE]: The skill provides instructions for connecting to the Diagrid Catalyst platform using environment variables and official console links (
catalyst.diagrid.io). It correctly identifies the handling of sensitive connection values through platform-provided tools.
Audit Metadata