effectcraft-editor
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides explicit instructions for the agent to run a local command (
node ui/dist/adapter.mjs --serve) to start the editor's UI adapter service if it is not already running. This is a primary functional requirement for the skill's operation. - [INDIRECT_PROMPT_INJECTION]: The skill allows the agent to read and write files within the workspace via the editor interface, creating a standard surface for indirect prompt injection attacks where malicious file content could influence the agent.
- Ingestion points: Data enters the agent's context through tools like
save_file,command_run, and direct workspace inspection via the editor. - Boundary markers: There are no specific instructions or delimiters provided to help the agent distinguish between data and potential commands within the workspace files.
- Capability inventory: The skill possesses the capability to execute local scripts, manage workspace files, and open browser URLs.
- Sanitization: No explicit sanitization or validation of the data retrieved from the workspace or editor interface is specified.
Audit Metadata