ce-prototype
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Node.js script (
scripts/light-webserver.js) to serve prototype artifacts. It uses shell commands to manage the server lifecycle (start, stop, status) within a restricted environment. - [DATA_EXPOSURE]: The bundled web server provides access to files within the generated prototype directory. It includes logic to prevent path traversal attacks by ensuring all requested file paths are contained within the designated root directory using real-path resolution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from the current repository and user-provided prompts to generate prototype code. While this introduces a surface for indirect injection, the risk is mitigated by the restricted execution environment (local server) and the specific nature of the output (throwaway prototypes).
- Ingestion points: Reads project files, component definitions, and flow descriptions from the current repository.
- Boundary markers: Not explicitly defined in the prototype generation instructions.
- Capability inventory: Writing to /tmp directory, executing local server scripts, and modifying specific sections of Product Contract files (Product Contract heading) in the repository.
- Sanitization: Implements real-path validation for the local web server to prevent directory traversal.
Audit Metadata