build

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions (SKILL.md) and QA checklists recommend the use of standard development and deployment CLI tools, including npx netlify-cli, npx vercel, npx wrangler, and npx playwright. These are industry-standard tools for the stated purpose of building and shipping websites.
  • [EXTERNAL_DOWNLOADS]: The skill provides references to external repositories (e.g., pbakaus/impeccable, garrytan/gstack) for additional learning and tooling. It includes instructions for cloning and setting up these external resources, which are cited as inspirations for the skill's methodology.
  • [INDIRECT_PROMPT_INJECTION]: The tools/sitecheck.py utility is designed to crawl and analyze HTML content from local directories or remote URLs. As an automated diagnostic tool that parses external data, it represents a standard ingestion surface for indirect prompt injection, though its primary function is reporting technical errors rather than influencing agent logic.
  • [DYNAMIC_EXECUTION]: The testing script tools/test_build.py utilizes subprocess.run to execute the local sitecheck.py tool for unit testing. This is a standard practice for verifying CLI tool behavior and uses controlled, internal file paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:30 PM