Angular v22 Node Compatibility Gate
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute build, test, and lint scripts defined within the local repository's configuration. This capability is restricted to commands already present in the target environment.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it processes external data that could contain malicious instructions.
- Ingestion points: The skill reads untrusted data from
package.json,angular.json, and CI configuration files. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard natural language commands embedded within these data files.
- Capability inventory: The skill allows for the execution of shell-based validation scripts (subprocess calls) based on the contents of the repository.
- Sanitization: No sanitization or validation logic is defined to check the contents of the ingested files before they are used to determine agent actions.
Audit Metadata