fastify-plugin-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on external backend codebases, creating a potential surface for indirect prompt injection where malicious instructions in project files could influence agent behavior.
- Ingestion points: The skill uses
ReadandGreptools to ingest content from the local file system (SKILL.md). - Boundary markers: The instructions do not define explicit delimiters or instructions to ignore potential commands embedded within the processed code.
- Capability inventory: The skill is granted broad execution permissions, including
Bash(cmd:*),Write, andEdit, which could be abused if the agent follows instructions found in untrusted data. - Sanitization: There are no specific sanitization or validation steps defined for handling external input before it is used to inform further actions.
Audit Metadata