generating-grpc-services
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Protocol Buffer files to scaffold code, which represents a surface where instructions embedded in those files could influence agent behavior.
- Ingestion points:
SKILL.mdinstructions 1 and 2 describe reading existing.protofiles usingGlobandReadtools. - Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings for the content of the processed files.
- Capability inventory: The skill utilizes
WriteandEdittools for file creation andBashfor running compilation tools likeprotocandbuf. - Sanitization: There is no mention of filtering or validating input file content for natural language instructions.
- [EXTERNAL_DOWNLOADS]: The skill references standard gRPC libraries and tools from official package registries.
- Evidence:
references/examples.mdincludes commands to install@grpc/grpc-jsand@grpc/proto-loadervianpm. - Evidence:
SKILL.mdprerequisites include well-known packages such asgrpcio-toolsandgrpc_tools_node_protoc_plugin. - [COMMAND_EXECUTION]: The skill uses shell commands to compile definitions and perform service introspection.
- Evidence:
references/examples.mdprovidesbashexamples forprotoc,buf, andgrpcurlexecution.
Audit Metadata