upgrade-scenic-project-deps
Warn
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to modify the project's Dockerfile to include
RUN apk add --no-cache curl. The documentation within the skill explains this is required for the@foundbyte/security-monitor-usagepackage to capture the host's external IP address, which constitutes outbound exfiltration of environmental metadata. - [EXTERNAL_DOWNLOADS]: The skill installs and upgrades several scoped NPM packages, including
@foundbyte/eslint-pluginand@keyblade/vite-plugin-vue-pro. These packages do not originate from globally trusted organizations or the skill author's verified namespace. - [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands such as
pnpm install,pnpm eslint, andpnpm stylelint, which involves running code contained within the newly added or updated project dependencies. - [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Reads local configuration files including
package.json,eslint.config.ts, andweb/vite.config.ts. 2. Boundary markers: Absent. 3. Capability inventory: Modifies files, installs packages, and executes shell commands. 4. Sanitization: Absent; the skill directly uses ingested file content to guide subsequent file modifications.
Audit Metadata