julia-development
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMMETADATA_POISONINGEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The
metadata.jsonfile attributes the skill to author "seabbs" and the repository "seabbs/claude-code-config", which is inconsistent with the expected author identity "majiayu000" provided in the evaluation context. This discrepancy in attribution can be misleading regarding the source and provenance of the skill. - [EXTERNAL_DOWNLOADS]: The skill's development workflow utilizes the standard Julia package manager (
Pkg) to fetch and update dependencies. These operations involve downloading code from the official Julia General Registry or other external sources, which is a standard procedure in Julia development but represents an external dependency entry point. - [COMMAND_EXECUTION]: The skill provides instructions for executing various shell-based Julia commands, including project instantiation, test execution, documentation generation via
make.jl, and running pre-commit hooks. These are standard developer tools used for project maintenance and validation. - [INDIRECT_PROMPT_INJECTION]: The skill defines templates for docstrings and struct fields (e.g., using
DocStringExtensions). This pattern provides a surface where the agent might interpolate user-supplied data (such as function names, field descriptions, or examples) into documentation blocks that are subsequently processed or displayed. - Ingestion points: SKILL.md (docstring templates, struct definitions, and LaTeX blocks)
- Boundary markers: None explicitly defined in the templates to separate user data from documentation instructions
- Capability inventory: Execution of Julia commands, package management via
Pkg, and documentation building - Sanitization: None specified for the interpolation of user-provided content into docstring templates
Audit Metadata