library-evaluation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from sources such as npm, GitHub, and package documentation. This creates a surface for indirect prompt injection if those sources contain malicious instructions. However, the risk is negligible as the skill lacks executable capabilities.
- Ingestion points: Step 1 (Search results from npm/GitHub) and Step 5 (Library documentation).
- Boundary markers: None explicitly defined for interpolating external content into the agent's context.
- Capability inventory: None. The skill generates text-based comparison matrices and rationales; it does not include file system writes, network exfiltration, or shell command execution.
- Sanitization: The skill contains an explicit sanitization section stating that no user-provided values are used in commands or file paths, and all inputs are treated as read-only.
- [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It does not include any scripts, executable binaries, or configuration files that could facilitate unauthorized code execution.
Audit Metadata