nodumb
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill suggests using shell commands for static code analysis to help developers make scaling decisions.
- Evidence:
grepcommands inreferences/scaling-build-system.mdandreferences/scaling-triggers.mdare used to count UI token frequencies and identify architectural boundary violations (e.g., components referencing model types). - [INDIRECT_PROMPT_INJECTION]: The skill acts on external inputs such as user task descriptions and local source code files, which creates an attack surface for instructions embedded in data.
- Ingestion points: User prompts, task descriptions, and local source files (via
grepanalysis suggested inreferences/scaling-build-system.mdandreferences/scaling-triggers.md). - Boundary markers: None identified; the skill assumes the developer/agent context for processing instructions.
- Capability inventory: The skill suggests executing
grepcommands for code analysis. - Sanitization: No explicit sanitization of user-provided paths or task content is described in the reference files.
Audit Metadata