fitness-functions
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides users to run CLI commands such as
npx eventcatalog fitness checkto evaluate architectural rules in local development and CI environments. - [DYNAMIC_EXECUTION]: The skill assists in authoring and executing custom TypeScript logic (
*.fitness.tsfiles) that is processed at runtime by the EventCatalog CLI to validate architectural constraints. - [EXTERNAL_DOWNLOADS]: Instructions and examples involve the use of official Node.js packages including
@eventcatalog/core,@eventcatalog/cli, and@eventcatalog/fitnessfrom the vendor's official distribution channels. - [INDIRECT_PROMPT_INJECTION]: The fitness functions process architectural metadata from the catalog, representing a surface where modified catalog data could influence the automated checks. 1. Ingestion points: Catalog resource data (Markdown and YAML frontmatter) is read via the catalog SDK methods defined in
references/api.md. 2. Boundary markers: No specific delimiters or safety instructions are defined for the ingested catalog content. 3. Capability inventory: The system executes TypeScript logic with project-level access to perform analysis, as described in the 'Trust' section ofSKILL.md. 4. Sanitization: The skill provides examples of parsing catalog data using standard methods likeJSON.parsebut relies on the integrity of the local catalog files.
Audit Metadata