fcode-cli
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation guides users to install the
@factorialco/fcode-clipackage viapnpm. This is an official vendor package required for the core functionality of the skill. - [COMMAND_EXECUTION]: The skill utilizes several CLI commands like
fcode runfor executing processes andfcode dependencies:installfor managing environment dependencies. These are standard operations for the described developer tool. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with workspace configuration files (
metadata.json,team.json,.env) and user-provided parameters, representing a potential surface for indirect prompt injection. 1. Ingestion points:metadata.json,team.json,variables.env, and the--parameterscommand-line flag. 2. Boundary markers: No specific delimiters are defined in the instructions for separating untrusted content. 3. Capability inventory: The skill uses CLI commands to sync files, register resources, and execute local processes. 4. Sanitization: The documentation explicitly advises users to store sensitive tokens in a local-only environment file (variables.local.env) to prevent their exposure during cloud synchronization.
Audit Metadata