acreadiness-assess
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute theagentrctool from Microsoft's official GitHub organization.\n - Evidence:
npx -y github:microsoft/agentrc readinessinSKILL.md.\n- [COMMAND_EXECUTION]: The skill executes system commands to check the Node.js environment and run the assessment scanner.\n - Evidence:
node --versionandnpx -y github:microsoft/agentrc readinessinSKILL.md.\n- [DYNAMIC_EXECUTION]: The skill dynamically executes remote code from a trusted source via thenpxpackage runner.\n - Evidence:
npx -y github:microsoft/agentrcinSKILL.md.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes output from a repository scan to generate a visual report. This constitutes a potential surface where content within the scanned repository could attempt to influence the report generation process via placeholders in the HTML template.\n - Ingestion points: Scan results from the repository processed as a JSON envelope.\n
- Boundary markers: None explicitly defined in the template substitution instructions.\n
- Capability inventory: Shell command execution and local file writing (
reports/index.html).\n - Sanitization: Not specified; the AI agent is instructed to perform placeholder substitution based on the scanner output.
Audit Metadata