flare
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
spatie/flare-clipackage, which is installed via Composer. This is an official tool from a reputable vendor associated with the skill's author. - [COMMAND_EXECUTION]: The skill executes various
flareCLI commands to interact with the Flare API, as well asgitand local file read operations to assist in debugging application errors. These actions are consistent with the tool's intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill handles data from an external API, including exception messages and stack traces, which acts as a surface for indirect prompt injection.
- Ingestion points: Error messages, exception classes, and AI-generated solutions retrieved from the Flare API are processed by the agent.
- Boundary markers: The provided documentation does not specify the use of strict delimiters for external data in the agent's context.
- Capability inventory: The agent has the capability to execute CLI commands, read local source code, and perform git diffs.
- Sanitization: No explicit sanitization or input validation logic for API data is described within the skill files.
Audit Metadata