deploy
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by interpolating untrusted user data into its operational flow.
- Ingestion points: User input is accepted through
$ARGUMENTS,$0, and$versionplaceholders inSKILL.md. - Boundary markers: Absent. The skill does not use delimiters or instructions to treat the interpolated content as non-executable data.
- Capability inventory: The skill's frontmatter allows the use of
git,npm, andghcommands, providing a significant capability surface for manipulated arguments. - Sanitization: Absent. There is no evidence of validation or escaping for the user-supplied arguments before they are used in the deployment process.
Audit Metadata