create-dart-bg-activity
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
launchctlto manage the lifecycle of background services on macOS, including bootstrap, bootout, and state inspection. - [COMMAND_EXECUTION]: The agent is instructed to compile Dart source code into executables using
dart compileand to create shell scripts that execute background processes. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it ingests and processes repository-provided code to generate persistent system services.
- Ingestion points: The skill reads repository structure and Dart files to determine service names and entrypoints.
- Boundary markers: No explicit delimiters are suggested to prevent external code from influencing the agent's behavior during the scaffolding process.
- Capability inventory: The skill has the ability to write persistence files (
.plist) to user library directories and execute system management commands. - Sanitization: No validation or sanitization of ingested code content is performed before generating the service configuration.
- [SAFE]: The use of persistence mechanisms (macOS LaunchAgents) is clearly documented and represents the primary intended purpose of the skill for legitimate developer workflows.
Audit Metadata