documenso-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The implementation guide includes a configuration loader that utilizes dynamic module loading to import environment-specific JSON files.
- Evidence: The function
loadConfiginreferences/implementation-guide.mdusesrequire("../../config/documenso.${env}.json")where${env}is derived from theNODE_ENVenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external environment files and local JSON configurations, which represents a surface for indirect instructions if those sources are compromised.
- Ingestion points: The skill reads configuration from
.envfiles and local JSON configuration files within theconfig/directory. - Boundary markers: No explicit delimiter or "ignore instructions" markers are defined for the configuration data ingestion.
- Capability inventory: The skill is configured with
Read,Write, andEdittool permissions. - Sanitization: The implementation guide demonstrates best practices by using
zodschema validation to ensure the integrity of the loaded configuration data.
Audit Metadata