react-feature

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/validate.ts file uses node:child_process.spawnSync to execute project-local commands such as pnpm run lint, pnpm run test, and pnpm run build. This is a standard automation pattern for development workflows to verify changes before submission.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read feature specifications and tickets from external tracking systems. This represents a potential indirect injection surface if external data sources are compromised.
  • Ingestion points: Section 1 ('Frame the screen') directs the agent to read ticket references through a configured tracker.
  • Boundary markers: None specified in the instructions for external data.
  • Capability inventory: The skill has capabilities for file system writes (creating features/routes) and subprocess execution via the validation script.
  • Sanitization: No specific sanitization or filtering is mentioned for the ingested ticket data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:11 PM