build
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions (SKILL.md) and QA checklists recommend the use of standard development and deployment CLI tools, including
npx netlify-cli,npx vercel,npx wrangler, andnpx playwright. These are industry-standard tools for the stated purpose of building and shipping websites. - [EXTERNAL_DOWNLOADS]: The skill provides references to external repositories (e.g., pbakaus/impeccable, garrytan/gstack) for additional learning and tooling. It includes instructions for cloning and setting up these external resources, which are cited as inspirations for the skill's methodology.
- [INDIRECT_PROMPT_INJECTION]: The
tools/sitecheck.pyutility is designed to crawl and analyze HTML content from local directories or remote URLs. As an automated diagnostic tool that parses external data, it represents a standard ingestion surface for indirect prompt injection, though its primary function is reporting technical errors rather than influencing agent logic. - [DYNAMIC_EXECUTION]: The testing script
tools/test_build.pyutilizessubprocess.runto execute the localsitecheck.pytool for unit testing. This is a standard practice for verifying CLI tool behavior and uses controlled, internal file paths.
Audit Metadata