module-scaffolding
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill mentions local development commands such as
node ace make:module,pnpm dev, andpnpm typecheck. These are standard practices for an AdonisJS project and do not involve suspicious parameters or remote execution. - [DATA_EXPOSURE]: The instructions involve modifying project configuration files like
package.json,adonisrc.ts, anddatabase.ts. No hardcoded credentials or commands to exfiltrate sensitive files were found. - [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
- [REMOTE_CODE_EXECUTION]: The skill does not suggest downloading or executing scripts from external or untrusted sources.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes a user-provided module name (
<mod>) to generate file paths and configuration entries, it does so within the context of a developer tool. Standard risks associated with code generation exist, but no specific vulnerabilities were identified. - [OBFUSCATION]: The content is clear and readable, with no hidden characters, encoding, or deceptive formatting detected.
Audit Metadata