webpack-expert

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs environment detection and build validation using shell commands like webpack --version, node -v, and npm run build. These are standard operations for a build-related skill.\n- [COMMAND_EXECUTION]: The skill uses lhci to generate and upload performance reports to temporary storage, which is a standard procedure for Lighthouse CI integration.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external configuration files, creating a surface for indirect prompt injection.\n
  • Ingestion points: Reads package.json and webpack*.js files using the Read, Glob, and Grep tools.\n
  • Boundary markers: No delimiters or safety instructions are defined for the ingested data.\n
  • Capability inventory: The skill has access to Bash for command execution and Edit/MultiEdit for file modification.\n
  • Sanitization: The skill does not explicitly sanitize the contents of the configuration files before they are processed by the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 02:37 PM