ng-prototype

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard local development tools such as pnpm, node, tsx, and the Angular CLI (ng) to run and build prototype code. These operations are confined to the local workspace and are expected for the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: A health check is performed using curl to verify the status of the local development server at http://localhost:4200. This is a benign diagnostic check on a local interface.
  • [INDIRECT_PROMPT_INJECTION]: The skill evaluates user prompts and URL query parameters (e.g., ?variant=) to determine which prototype branch to execute or which UI version to render. While this is an ingestion surface for untrusted data, it is a core functional requirement and the skill provides clear instructions for handling these inputs safely within a development context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 03:53 PM