local-dev
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a documentation resource for Freenet developers. The provided instructions focus on local environment setup, port configuration, and node log analysis, all of which are standard practices for local software development and testing.- [COMMAND_EXECUTION]: The skill instructs the agent to use command-line tools including the Freenet node binary, the fdev utility, and common Unix tools like curl and grep to interact with the local development node.- [EXTERNAL_DOWNLOADS]: The skill mentions adding the WebAssembly target for Rust using rustup, which involves downloading official toolchain components from a well-known and trusted development service.- [INDIRECT_PROMPT_INJECTION]: The skill describes functionality where an agent interacts with content from Freenet contracts through web interfaces and WebSocket APIs, creating a potential surface for indirect prompt injection.
- Ingestion points: Interaction with contract web interfaces (
/v1/contract/web/{key}) and the WebSocket API (SKILL.md). - Boundary markers: No specific delimiters or boundary markers are defined for the agent to use when processing external contract data.
- Capability inventory: Access to shell execution (
freenet,fdev,curl), file system management (--data-dir), and browser automation tools. - Sanitization: There are no described methods for sanitizing or filtering data retrieved from external contracts before it is processed by the agent.
Audit Metadata