fusion-developer-portal
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute pnpm and the Fusion Framework CLI (ffc) for tasks such as project initialization, local development (ffc portal dev), and portal deployment (ffc portal upload).
- [EXTERNAL_DOWNLOADS]: Projects built with this skill download dependencies from the @equinor vendor namespace and standard registries (NPM).
- [INDIRECT_PROMPT_INJECTION]: The skill's integration with the fusion-research helper agent creates a data ingestion surface where external documentation could potentially contain instructions that influence the agent's behavior. Evidence: 1. Ingestion: Companion agent outputs from fusion-research. 2. Boundaries: None specified in the skill for processing helper agent responses. 3. Capability: The skill involves CLI execution and file system modifications based on research. 4. Sanitization: None mentioned.
- [SAFE]: The skill explicitly warns against hardcoding authentication tokens in source code or commands, recommending the use of environment variables or official Azure login tools instead.
Audit Metadata