module-scaffolding

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill mentions local development commands such as node ace make:module, pnpm dev, and pnpm typecheck. These are standard practices for an AdonisJS project and do not involve suspicious parameters or remote execution.
  • [DATA_EXPOSURE]: The instructions involve modifying project configuration files like package.json, adonisrc.ts, and database.ts. No hardcoded credentials or commands to exfiltrate sensitive files were found.
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
  • [REMOTE_CODE_EXECUTION]: The skill does not suggest downloading or executing scripts from external or untrusted sources.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes a user-provided module name (<mod>) to generate file paths and configuration entries, it does so within the context of a developer tool. Standard risks associated with code generation exist, but no specific vulnerabilities were identified.
  • [OBFUSCATION]: The content is clear and readable, with no hidden characters, encoding, or deceptive formatting detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 01:04 PM
Security Audit — agent-trust-hub — module-scaffolding