speak-multi-env-setup
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The implementation guide includes a code example that utilizes the
requirefunction to load JSON configuration files from a path constructed at runtime using an environment variable. Although the environment variable is validated against a whitelist of known strings ('development', 'staging', 'production') before use, loading code or data from computed paths is a dynamic execution pattern. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process JSON configuration files (
base.json,development.json, etc.). Processing external structured data without explicit boundary markers or sanitization logic presents a potential surface for indirect injection if those files were to be compromised or contain malicious instructions. - Ingestion points: JSON configuration files referenced in
references/implementation-guide.md(e.g.,base.json,production.json). - Boundary markers: None identified in the provided configuration loading logic.
- Capability inventory: The skill uses
curlfor network health checks,npmfor package management, andrequirefor dynamic file loading. - Sanitization: No validation or sanitization routines are specified for the configuration data prior to use.
Audit Metadata