webpack-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs environment detection and build validation using shell commands like
webpack --version,node -v, andnpm run build. These are standard operations for a build-related skill.\n- [COMMAND_EXECUTION]: The skill useslhcito generate and upload performance reports to temporary storage, which is a standard procedure for Lighthouse CI integration.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external configuration files, creating a surface for indirect prompt injection.\n - Ingestion points: Reads
package.jsonandwebpack*.jsfiles using theRead,Glob, andGreptools.\n - Boundary markers: No delimiters or safety instructions are defined for the ingested data.\n
- Capability inventory: The skill has access to
Bashfor command execution andEdit/MultiEditfor file modification.\n - Sanitization: The skill does not explicitly sanitize the contents of the configuration files before they are processed by the agent context.
Audit Metadata