compose-reference
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The file is a documentation resource for the Goldsky Compose platform, providing guidance on building, editing, and deploying applications.
- [SAFE]: All network operations and external links are directed to official vendor-owned domains (goldsky.com, app.goldsky.com) or well-known technical resources (viem, privy).
- [SAFE]: The skill provides instructions for managing sensitive data like API tokens and secrets using the vendor's official CLI tools (compose secret set), which is a standard and secure practice.
- [INDIRECT_PROMPT_INJECTION]: The platform architecture described allows for processing untrusted data via HTTP and on-chain event triggers. 1. Ingestion points: Triggers defined in compose.yaml (HTTP endpoints and blockchain events) ingest external data into task parameters. 2. Boundary markers: The documentation specifies that runtime capabilities are injected via a context argument, establishing a clear execution boundary. 3. Capability inventory: Tasks have access to network fetching (ctx.fetch), blockchain interactions (writeContract), and task-to-task calls (callTask). 4. Sanitization: The reference focuses on API signatures and does not mandate specific sanitization logic, which is typical for developer-facing reference documentation.
Audit Metadata