wasm
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data including WASM source files and configuration files. 1. Ingestion points: .wasm, .wat, .wit, .witx, Cargo.toml, package.json. 2. Boundary markers: None identified. 3. Capability inventory: The skill uses bash to execute build and optimization tools (wasm-pack, cargo, wasm-opt, twiggy, brotli, gzip, emcc). 4. Sanitization: No specific sanitization of ingested content is mentioned.
- [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands for building, optimizing, and analyzing WASM modules. Evidence: Documentation includes bash commands for wasm-pack, cargo, wasm-opt, twiggy, brotli, gzip, and emcc.
Audit Metadata