verify-build
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill triggers the
npm run buildcommand within a specified project root. This execution is confined to the local environment and is the primary function of the tool. - [INDIRECT_PROMPT_INJECTION]: The tool relies on the configuration within the local
package.jsonfile. Execution of build scripts defined in that file is a standard part of the build process. - Ingestion points:
package.json(processed bynpminscripts/verify_build.sh) - Boundary markers: Absent
- Capability inventory: Shell command execution via
npm run buildinscripts/verify_build.sh - Sanitization: Absent
Audit Metadata