init
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the system terminal to execute vendor-specific tools, specifically calling
npx @ericrisco/rsc addto install additional skills andnpx @ericrisco/rsc auditto inventory the local environment. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of extensions from the
@ericriscoNPM scope. It also suggests integrating an external MCP server located athttps://mcp.context7.com/mcpto provide version-accurate library documentation. - [INDIRECT_PROMPT_INJECTION]: The skill identifies the project's technology stack by reading local manifest files such as
package.json,pyproject.toml,go.mod, and others. These files act as ingestion points for external data. - Ingestion points: A read-only walk of the workspace root to detect manifest files and project structure (specified in
references/discovery.md). - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from processing malicious instructions that might be embedded within these manifest files.
- Capability inventory: The skill possesses the capability to execute shell commands via
npx, modify project configuration files (likeCLAUDE.md), and write new files to the02-DOCS/directory. - Sanitization: No specific sanitization or validation logic is detailed for the content extracted from project manifest files.
Audit Metadata