docyrus-create-app
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
docyrusCLI for application lifecycle tasks, including creation, cloning, and metadata retrieval. It also provides instructions for running standard development commands likepnpm installandpnpm run devwithin the cloned project directory. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of application source code from Docyrus infrastructure and the installation of Node.js dependencies from official registries. These operations are standard for the skill's stated purpose of bootstrapping development workspaces.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface through its template remixing feature.
- Ingestion points: External code is ingested into the local environment when using the
docyrus apps create --from-templatecommand (SKILL.md). - Boundary markers: There are no specific boundary markers or instructions to disregard embedded instructions within the cloned repository content.
- Capability inventory: The skill utilizes CLI execution and shell commands for package management and server execution.
- Sanitization: No sanitization or filtering of the cloned repository content is performed before processing.
Audit Metadata