generate-resource-stubs
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gcx dev generatecommand to create Go source files on the local file system. This is an intended function for scaffolding developer projects. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided file paths and names as arguments to the
gcxcommand. While this represents a surface for potential input manipulation, the risk is limited to the local development environment and the generation of Go code stubs. - Ingestion points: User-supplied filenames and directory paths used in the
gcx dev generatecommand. - Boundary markers: None explicitly defined in the prompt instructions.
- Capability inventory: Local file system writes via the
gcxtool as described inSKILL.md. - Sanitization: The skill does not explicitly describe input sanitization, relying on the underlying
gcxtool's handling of arguments.
Audit Metadata