start
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to guide users through executing standard development commands such as
uvicornfor local hosting and theRailway CLIfor cloud deployment. These are appropriate for the skill's stated purpose of environment setup. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read state information from a local file named
.wca-estado.jsonto determine the current progress of the onboarding. - Ingestion points:
.wca-estado.json(local file system). - Boundary markers: The skill uses a specific schema logic (checking the
fasefield) to interpret the file content. - Capability inventory: The instructions involve guiding the user through file system reads, environment configuration, and deployment commands.
- Sanitization: The skill relies on structured JSON fields (
fase) rather than raw text interpolation for control flow, which limits the risk of injection from this file.
Audit Metadata