ptlam-health-connector-setup
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to configure and verify the development environment. This includes using
fvmfor Flutter SDK management,sdkfor Java environment setup, andmelosfor Dart workspace bootstrapping. These commands are standard for the targeted development stacks. - [EXTERNAL_DOWNLOADS]: The skill utilizes well-known package managers to download project dependencies and toolchains. Specifically, it uses
fvm installto fetch Flutter,npm cifor documentation dependencies, andsdk env installfor Java. These downloads are performed from official and trusted registries associated with these services. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes local project configuration files to determine the necessary tool versions, which represents an ingestion surface for untrusted data if the repository itself is compromised.
- Ingestion points: Files including
pubspec.yaml,.fvmrc,.sdkmanrc,.ruby-version,package.json, andpackage-lock.jsonlocated in the repository root. - Boundary markers: Absent.
- Capability inventory: The skill has the capability to execute shell commands via
fvm,melos,sdk,npm,java, and various platform-specific linters/formatters. - Sanitization: Absent; the skill relies on the content of the pinned configuration files to drive command arguments.
Audit Metadata