builderbot-code-skill
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for building chatbots that handle untrusted data. Ingestion points:
ctx.bodyinSKILL.mdandpatterns.md. Boundary markers: Regex validation patterns shown inpatterns.md. Capability inventory: Includes network requests (fetch), file management (provider.saveFile), and message dispatching (flowDynamic) as seen inpatterns.md. Sanitization: Logic for validating inputs (e.g., email regex) is documented inpatterns.md. - [EXTERNAL_DOWNLOADS]: The skill documentation references several official BuilderBot packages (e.g.,
@builderbot/bot,@builderbot/provider-baileys) and plugins from the npm registry. These are standard, well-known dependencies for the framework's core functionality.
Audit Metadata