powershell-style-guide
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The instructions in SKILL.md direct the AI agent to execute local helper scripts, such as python3 scripts/resolve_style_guides.py and python3 scripts/validate_trigger_matrix_sync.py, to manage trigger logic across multiple style guides. This involves spawning subprocesses to run Python code included within the skill package.
- [INDIRECT_PROMPT_INJECTION]: The skill logic processes user-controlled data (file paths) by passing them as arguments to local scripts. This represents a potential injection surface where crafted filenames could influence script behavior. Ingestion points: file paths from the user's project environment. Boundary markers: none present in the skill instructions. Capability inventory: subprocess execution of Python scripts. Sanitization: no instructions for sanitizing or validating the file paths are defined.
Audit Metadata