dineway-building-site
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of a CMS-driven site that ingests content from external sources (JSON seed files and database collections) and renders it into pages. This architecture presents an attack surface for indirect prompt injection if malicious instructions are embedded in the site content.
- Ingestion points: Ingests schema and content from
seed/seed.jsonand database entries retrieved viagetDinewayCollectionandgetDinewayEntryfunctions. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded content within the data templates.
- Capability inventory: The skill uses the
npx dinewayCLI for management tasks and performs network downloads for media assets. - Sanitization: The skill provides a reference example for an RSS feed that includes an
escapeXmlfunction to sanitize string data before output. - [EXTERNAL_DOWNLOADS]: The skill fetches a JSON schema from
https://dineway.foodism.ai/seed.schema.jsonfor validation and uses a$mediaproperty in seed files to download images from remote URLs. These are functional downloads necessary for the CMS's operation and population. - [COMMAND_EXECUTION]: Utilizes the
npx dinewayCLI for various development and administrative tasks, such asnpx dineway dev,npx dineway seed --validate, andnpx dineway deploy forgeway. These commands are specific to the framework's tooling and deployment workflow.
Audit Metadata