skills/dmmulroy/.dotfiles/prelude/Gen Agent Trust Hub

prelude

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill facilitates the organization of domain-neutral helpers and types. The included prelude.ts file contains standard TypeScript utility types and robust error-handling foundations.- [EXTERNAL_DOWNLOADS]: The skill mentions the potential installation of the better-result library via npm, which is a common and well-known utility for functional error handling in the TypeScript ecosystem.- [DATA_EXFILTRATION]: The skill provides a Redacted wrapper implementation, which is noted as being vendored from Cloudflare's official open-source repositories. This utility is a security best practice designed to prevent the accidental leakage of sensitive information in logs, JSON serialization, or debugger output.- [PROMPT_INJECTION]: The skill's workflow involves reading and processing repository source files, which constitutes a surface for indirect prompt injection. * Ingestion points: Reads repository instructions, package manifests, TypeScript configuration, and source files during the mapping phase (SKILL.md). * Boundary markers: No explicit instructions to the agent to disregard instructions embedded within the target repository's files were found. * Capability inventory: Includes file writing (prelude.ts), package management (npm install), and the execution of project-local verification tools like linters and type checkers. * Sanitization: There are no specific sanitization or filtering steps defined for the content ingested from the repository before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 10:54 AM
Security Audit — agent-trust-hub — prelude