fitness-functions

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides users to run CLI commands such as npx eventcatalog fitness check to evaluate architectural rules in local development and CI environments.
  • [DYNAMIC_EXECUTION]: The skill assists in authoring and executing custom TypeScript logic (*.fitness.ts files) that is processed at runtime by the EventCatalog CLI to validate architectural constraints.
  • [EXTERNAL_DOWNLOADS]: Instructions and examples involve the use of official Node.js packages including @eventcatalog/core, @eventcatalog/cli, and @eventcatalog/fitness from the vendor's official distribution channels.
  • [INDIRECT_PROMPT_INJECTION]: The fitness functions process architectural metadata from the catalog, representing a surface where modified catalog data could influence the automated checks. 1. Ingestion points: Catalog resource data (Markdown and YAML frontmatter) is read via the catalog SDK methods defined in references/api.md. 2. Boundary markers: No specific delimiters or safety instructions are defined for the ingested catalog content. 3. Capability inventory: The system executes TypeScript logic with project-level access to perform analysis, as described in the 'Trust' section of SKILL.md. 4. Sanitization: The skill provides examples of parsing catalog data using standard methods like JSON.parse but relies on the integrity of the local catalog files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 02:20 PM