acreadiness-assess
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
agentrcutility from the official Microsoft GitHub repository vianpxto perform the readiness scan. This uses a trusted vendor source for repository analysis. - [COMMAND_EXECUTION]: Initiates shell commands to verify the Node.js environment and run the assessment tool. These commands are limited to the primary function of repo auditing.
- [DATA_EXPOSURE]: Reads repository configuration and file structure to produce the readiness report. The resulting data is stored locally in
reports/index.htmland is not transmitted to external domains. - [PROMPT_INJECTION]: Identifies an indirect prompt injection surface where repository data (ingested via the AgentRC scan) is processed by the
@ai-readiness-reporteragent to populate thereport-template.htmltemplate. While the skill lacks explicit sanitization or boundary markers for this data, the output is a static local file, which limits the risk of instructions influencing the agent's system-level capabilities.
Audit Metadata