scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands including
mkdir -pandgit mvfor directory and file management. It also executespnpm ai-hero-cli internal lintto perform validation on the created content. - [PROMPT_INJECTION]: The skill defines a workflow that ingests an external 'plan' to determine the scaffolding structure, which represents a surface for indirect prompt injection.
- Ingestion points: The workflow parsed a 'plan' to extract sections, exercises, and variant types (SKILL.md).
- Boundary markers: Absent. No delimiters or instructions to ignore embedded directives within the plan are provided.
- Capability inventory: The agent has the ability to create directories, move files, and execute shell commands via
pnpm. - Sanitization: Absent. The instructions do not specify any validation or escaping of the content parsed from the plan.
Audit Metadata