cat-project-file
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
catcliutility for tasks such as creating projects (catcli new) and validating configurations (catcli show). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and restructure project configuration files (
*.cat.yaml), which could potentially contain untrusted data. - Ingestion points: External YAML configuration files.
- Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are provided in the skill text.
- Capability inventory: The skill utilizes shell command execution via
catcliand file system read/write operations. - Sanitization: No explicit sanitization or validation logic is defined within the instructions.
- [SAFE]: The instructions reference documentation from the vendor's official domain (
docs.justcat.it) and explicitly recommend using environment variables for sensitive connection strings to keep credentials out of version-controlled files.
Audit Metadata