friction-log
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a shell command using the kodycodes CLI to automate the filing of friction logs.
- Evidence: The skill provides a command block starting with
npx @kodycodes/cli execute --localinSKILL.md. - [EXTERNAL_DOWNLOADS]: The execution of the command relies on downloading the
@kodycodes/cliand@kentcdodds/friction-logpackages from the npm registry. - Evidence: The command includes references to
@kodycodes/cliand the package@kentcdodds/friction-log. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external sources, such as repository files and existing issues, which creates a potential surface for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: The skill instructs the agent to search open issues and review 'relevant files' to fill out the friction form.
- Boundary markers: No technical delimiters are used for the parameters passed to the command, though instructional warnings to 'Keep secrets and private data out' are present.
- Capability inventory: The skill utilizes shell command execution via
npxas its primary action. - Sanitization: The skill relies on natural language instructions for the agent to exclude sensitive data rather than programmatic sanitization.
Audit Metadata