setup-fa
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration guides and version information from official vendor domains (docs.fontawesome.com).
- [COMMAND_EXECUTION]: Automates project configuration using the 'fa' CLI and standard package managers (npm, yarn, pnpm) to install dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from project files and remote documentation to generate setup logic. Ingestion points: Project files (e.g., package.json, HTML templates) and documentation fetched via WebFetch. Boundary markers: No explicit delimiters are used when parsing external content. Capability inventory: File system writes (.npmrc, .font-awesome.md, HTML files), package installation, and CLI tool execution. Sanitization: Relies on official documentation from fontawesome.com as a trusted source.
Audit Metadata