react-doctor
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill invokes
npx -y react-doctor@latest, which downloads and executes the latest version of a package from the public npm registry without user confirmation. - [COMMAND_EXECUTION]: The skill executes shell commands to run diagnostic tools on the project directory.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it processes untrusted data from local codebase files. Ingestion points: Reads all files in the project root (
.) during the scan. Boundary markers: No delimiters or instructions are used to separate scanned file content from the agent's core instructions. Capability inventory: Shell command execution vianpx. Sanitization: No validation or sanitization of the scanned file content is performed before processing.
Audit Metadata