uniapp-project-creator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The shell script templates provided in templates/cli-commands.md (e.g., create-vue2-project.sh and create-vue3-project.sh) accept a project name as a command-line argument ($1) and interpolate it directly into shell commands like 'npx degit' and 'cd' without proper quoting or validation. This allows for command injection if an attacker provides a project name containing shell metacharacters.
- [INDIRECT_PROMPT_INJECTION]: The project creation workflow presents an attack surface where untrusted user input (project name) is passed directly to executable shell templates. * Ingestion points: User-provided project name in templates/cli-commands.md scripts. * Boundary markers: None. * Capability inventory: Remote repository fetching (npx degit), directory operations (cd), and package installation (npm install). * Sanitization: No validation or escaping is applied to the project name variable.
- [EXTERNAL_DOWNLOADS]: The skill instructions fetch project templates from the official dcloudio organization on GitHub using the degit tool. Evidence: 'npx degit dcloudio/uni-preset-vue'.
Audit Metadata