handler-scaffold-gen
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run
npx,vitest, and vendor-specificclefcommands for scaffolding and testing tasks. - [PROMPT_INJECTION]: Identification of an indirect prompt injection surface where user-provided arguments are used for code generation.
- Ingestion points:
$ARGUMENTS,$0, and$1inSKILL.mdare used to define concept names and actions. - Boundary markers: No specific delimiters or instructions are present to prevent embedded commands in arguments from being interpreted.
- Capability inventory: The skill uses
Read,Write, andBashtools to manage files and execute commands. - Sanitization: No explicit sanitization or validation of the input arguments is observed before interpolation into templates.
Audit Metadata