contributing-to-lt-framework
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
pnpmcommands for package installation and linking, and usespkillto manage background build processes. It also leverages a proprietary CLI tool (lt) for managing development environments. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local environment to coordinate sessions. Ingestion points: Output from
git statusandgit diffin the framework repositories. Boundary markers: None specified. Capability inventory: Shell command execution viapnpm,pkill, and vendor scripts. Sanitization: Not explicitly implemented for the ingested Git metadata. - [EXTERNAL_DOWNLOADS]: The skill references and clones various repositories from the
lenneTechGitHub organization to set up the development environment.
Audit Metadata