create-software
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches markdown references and instruction files from the author's public GitHub repository (Melvynx/ai-maxxing-skills) using
curlat runtime to supplement project configuration.- [COMMAND_EXECUTION]: Executes system-level commands to manage project infrastructure, includinggitfor source control,ghfor GitHub repository management, and thecfCLI for Cloudflare deployment operations.- [REMOTE_CODE_EXECUTION]: Utilizesnpxto download and execute remote packages such aslumail,convex, andshadcnduring the application setup process.- [DATA_EXFILTRATION]: Transmits user-provided subscriber data (emails and metadata) to an external service (lumail.io) via API calls as part of the application's core sign-up functionality.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a scaffolding engine that integrates user-defined briefs and processes untrusted inputs (like email addresses) in the resulting application, creating a surface for indirect prompt injection. - Ingestion points: User-provided application descriptions and the sign-up inputs in the generated web application.
- Boundary markers: No explicit delimiters or safety instructions are defined to separate user input from generated code logic.
- Capability inventory: Extensive system access including shell execution, file system modifications, and production environment deployments.
- Sanitization: No explicit sanitization or validation logic is specified for the inputs handled by the generated application code.
Audit Metadata