create-dart-bg-activity

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes launchctl to manage the lifecycle of background services on macOS, including bootstrap, bootout, and state inspection.
  • [COMMAND_EXECUTION]: The agent is instructed to compile Dart source code into executables using dart compile and to create shell scripts that execute background processes.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it ingests and processes repository-provided code to generate persistent system services.
  • Ingestion points: The skill reads repository structure and Dart files to determine service names and entrypoints.
  • Boundary markers: No explicit delimiters are suggested to prevent external code from influencing the agent's behavior during the scaffolding process.
  • Capability inventory: The skill has the ability to write persistence files (.plist) to user library directories and execute system management commands.
  • Sanitization: No validation or sanitization of ingested code content is performed before generating the service configuration.
  • [SAFE]: The use of persistence mechanisms (macOS LaunchAgents) is clearly documented and represents the primary intended purpose of the skill for legitimate developer workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 06:07 AM
Security Audit — agent-trust-hub — create-dart-bg-activity