discord-bot-architect
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The provided templates for Discord.js and Pycord use dynamic file loading to register commands and extensions.
- In
references/detailed-guide.md, the JavaScript foundation usesrequire(filePath)wherefilePathis dynamically computed by iterating over thesrc/commands/andsrc/events/directories. - In
references/detailed-guide.md, the Python foundation usesbot.load_extension()with paths derived fromos.listdir("./cogs"). - [INDIRECT_PROMPT_INJECTION]: The skill guides the creation of bots that ingest untrusted data from Discord users (messages, interactions), creating a potential attack surface.
- Ingestion points: External data enters the agent context through Discord Gateway events such as
interactionCreate(JavaScript) and slash command callbacks (Python) found inreferences/detailed-guide.md. - Boundary markers: Explicit delimiters or 'ignore' instructions are absent in the boilerplate code, leaving boundary enforcement to the developer's implementation.
- Capability inventory: The templates include capabilities to respond to interactions, send messages, and access guild metadata via requested intents.
- Sanitization: No input sanitization or validation logic is included in the basic structural templates.
Audit Metadata