fusion-help-integration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
pnpmto executetscandeslintfor integration verification, which are standard development tools for static analysis. - [EXTERNAL_DOWNLOADS]: The skill references dependencies like
@equinor/fusion-framework-react-appand@fra/ui. These are official vendor libraries for the Fusion framework used within the Equinor ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill reads local application source files to identify existing help configurations. This ingestion of local repository data presents a surface for indirect prompt injection, though the risk is minimal given the developer-focused context.
- Ingestion points:
apps/{app-name}/src/**/helpArticles.tsand React component files. - Boundary markers: Absent.
- Capability inventory: File system write operations and command execution via
pnpm. - Sanitization: Absent.
Audit Metadata