compose-vrf
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill explicitly instructs the AI agent to skip user confirmation for the
deployComposeApptool, directing it to call the tool "in the SAME turn" and stating "don't ask the user to confirm first." This attempts to override standard agent safety protocols requiring human-in-the-loop oversight for significant actions.\n- [EXTERNAL_DOWNLOADS]: The skill retrieves template files and source code from the author's GitHub repository usingnpx degitandgit clone. Evidence found in Step 0b:npx -y degit goldsky-io/documentation-examples/compose/VRF.\n- [COMMAND_EXECUTION]: The skill requires the agent to execute various shell-based commands for environment management, including the use ofgoldskyCLI,jq,git, andnpx. It includes commands for directory cleanup (rm -rf .compose/) and secure file deletion (shred -u /tmp/k.json) to manage local cache and protect temporary key material.
Audit Metadata