principle-build-the-lever
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and execute 'levers' like scripts and codemods to perform work, which involves the creation of executable content at runtime.
- [INDIRECT_PROMPT_INJECTION]: By encouraging the creation of tools based on the analysis of project files, the skill presents a surface where untrusted data in those files could influence the generated logic. This is noted as a potential attack surface, though it is consistent with the skill's primary purpose.
Audit Metadata