effect-service-implementation
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill references a local file path at
~/.local/share/effect-solutions/effect/for the agent to use as a source of truth for APIs, types, and implementations. This is a standard method for providing library context to an AI agent. - [COMMAND_EXECUTION]: Provides a code pattern for implementing a
Gitservice that executes shell commands using theChildProcessmodule. This is intended to demonstrate how to wrap CLI tools into an Effect service capability. - [PROMPT_INJECTION]: (Category 8
- Indirect) The skill defines architectural patterns for services that ingest external data, creating a potential attack surface if implemented without validation.
- Ingestion points: Service methods defined in
SKILL.mdsuch asDatabase.query(sql)andGit.run(args). - Boundary markers: Not present as these are code templates, not runtime instructions.
- Capability inventory: The patterns include subprocess execution (
ChildProcess.make) and database interactions (db.query). - Sanitization: The database implementation example explicitly demonstrates the use of parameterized queries (
?) to prevent SQL injection, though the Git example passes arguments directly.
Audit Metadata