ptlam-health-connector-setup

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to configure and verify the development environment. This includes using fvm for Flutter SDK management, sdk for Java environment setup, and melos for Dart workspace bootstrapping. These commands are standard for the targeted development stacks.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes well-known package managers to download project dependencies and toolchains. Specifically, it uses fvm install to fetch Flutter, npm ci for documentation dependencies, and sdk env install for Java. These downloads are performed from official and trusted registries associated with these services.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and processes local project configuration files to determine the necessary tool versions, which represents an ingestion surface for untrusted data if the repository itself is compromised.
  • Ingestion points: Files including pubspec.yaml, .fvmrc, .sdkmanrc, .ruby-version, package.json, and package-lock.json located in the repository root.
  • Boundary markers: Absent.
  • Capability inventory: The skill has the capability to execute shell commands via fvm, melos, sdk, npm, java, and various platform-specific linters/formatters.
  • Sanitization: Absent; the skill relies on the content of the pinned configuration files to drive command arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 04:03 PM
Security Audit — agent-trust-hub — ptlam-health-connector-setup