julia-development

Warn

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: MEDIUMMETADATA_POISONINGEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [METADATA_POISONING]: The metadata.json file attributes the skill to author "seabbs" and the repository "seabbs/claude-code-config", which is inconsistent with the expected author identity "majiayu000" provided in the evaluation context. This discrepancy in attribution can be misleading regarding the source and provenance of the skill.
  • [EXTERNAL_DOWNLOADS]: The skill's development workflow utilizes the standard Julia package manager (Pkg) to fetch and update dependencies. These operations involve downloading code from the official Julia General Registry or other external sources, which is a standard procedure in Julia development but represents an external dependency entry point.
  • [COMMAND_EXECUTION]: The skill provides instructions for executing various shell-based Julia commands, including project instantiation, test execution, documentation generation via make.jl, and running pre-commit hooks. These are standard developer tools used for project maintenance and validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines templates for docstrings and struct fields (e.g., using DocStringExtensions). This pattern provides a surface where the agent might interpolate user-supplied data (such as function names, field descriptions, or examples) into documentation blocks that are subsequently processed or displayed.
  • Ingestion points: SKILL.md (docstring templates, struct definitions, and LaTeX blocks)
  • Boundary markers: None explicitly defined in the templates to separate user data from documentation instructions
  • Capability inventory: Execution of Julia commands, package management via Pkg, and documentation building
  • Sanitization: None specified for the interpolation of user-provided content into docstring templates
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 14, 2026, 04:06 AM