prelude
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill facilitates the organization of domain-neutral helpers and types. The included
prelude.tsfile contains standard TypeScript utility types and robust error-handling foundations.- [EXTERNAL_DOWNLOADS]: The skill mentions the potential installation of thebetter-resultlibrary vianpm, which is a common and well-known utility for functional error handling in the TypeScript ecosystem.- [DATA_EXFILTRATION]: The skill provides aRedactedwrapper implementation, which is noted as being vendored from Cloudflare's official open-source repositories. This utility is a security best practice designed to prevent the accidental leakage of sensitive information in logs, JSON serialization, or debugger output.- [PROMPT_INJECTION]: The skill's workflow involves reading and processing repository source files, which constitutes a surface for indirect prompt injection. * Ingestion points: Reads repository instructions, package manifests, TypeScript configuration, and source files during the mapping phase (SKILL.md). * Boundary markers: No explicit instructions to the agent to disregard instructions embedded within the target repository's files were found. * Capability inventory: Includes file writing (prelude.ts), package management (npm install), and the execution of project-local verification tools like linters and type checkers. * Sanitization: There are no specific sanitization or filtering steps defined for the content ingested from the repository before it is processed by the agent.
Audit Metadata