fallow-codex-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to offer the installation of the
fallowpackage globally usingnpm install --global fallowif the tool is not detected on the system PATH. This is part of the primary onboarding workflow for the vendor's tool. - [COMMAND_EXECUTION]: The agent is directed to execute shell commands to verify the installation of the
fallowCLI and to perform the installation after receiving user consent. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local project via the
fallow_analyzetool, which presents an attack surface for instructions embedded in the analyzed codebase. - Ingestion points: Results from the
fallow_analyzetool call. - Boundary markers: None present in the instructions.
- Capability inventory: Access to
fallow_settings_updateand the ability to executenpm installcommands. - Sanitization: No explicit sanitization of the tool output is mentioned before presenting findings to the user.
Audit Metadata