assemble-lib-rules
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
opentaint health --rulescommand to synchronize with the tool's built-in rule database. This execution is consistent with the primary purpose of the skill and the author's own tooling. - [PROMPT_INJECTION]: The skill processes project-level tracking files from
.opentaint/tracking/rules/lib/to generate rule configurations, representing a surface for indirect prompt injection. - Ingestion points: Tracking files located in
.opentaint/tracking/rules/lib/. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for input file processing.
- Capability inventory: File system writes to
.opentaint/rules/and execution of project-specific CLI tools. - Sanitization: No specific validation or escaping is defined for the content extracted from tracking files before being used in rule generation.
- [NO_CODE]: The skill consists entirely of instructional markdown and does not include any standalone executable scripts or binaries, relying instead on the agent's ability to manipulate files and call existing system tools.
Audit Metadata