launchdarkly-flag-drift
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute a project's existing validation suite (such as
npm test,make build, or linting) discovered from files likepackage.jsonorMakefileto ensure code changes are valid. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
@launchdarkly/mcp-server, which is the official LaunchDarkly-maintained server for interacting with their feature management platform. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources that could potentially contain injection attempts.
- Ingestion points: Data retrieved from the LaunchDarkly API (via the
get-flagtool) and source code contents from the user's repository. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill utilizes file reading, file modification, and shell command execution (for build/test validation).
- Sanitization: The skill relies on standard SDK patterns and value normalization but does not detail specific content sanitization.
Audit Metadata