wearables-ui-toolkit-web
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes
scripts/init-app.mjs, which performs file system operations to set up a new application workspace. It also instructs the agent to run common development tools such asviteandtsc, as well as specific validation scripts located in sibling directories.\n- [EXTERNAL_DOWNLOADS]: Theassets/app-shell/package.jsonfile specifies several dependencies from the@wearables-ui-toolkitnamespace. These are official packages associated with the Meta Ray-Ban Display toolkit and are necessary for the application's runtime and build process.\n- [INDIRECT_PROMPT_INJECTION]: Thescripts/init-app.mjsscript accepts a user-provided workspace path as a command-line argument, which is used to create directories and copy template files.\n - Ingestion points: The script reads the workspace path from
process.argv[2].\n - Boundary markers:
SKILL.mddefines a "Hard execution boundary" that explicitly restricts the agent's file system access and tool usage during the development process.\n - Capability inventory: The script uses
mkdirSyncfor directory creation andcopyFileSyncfor transferring static template files (index.html,package.json,tsconfig.json,vite.config.ts) to the target workspace.\n - Sanitization: The input path is processed using
path.resolvebut lacks further validation against arbitrary path creation; however, the risk is mitigated by the fact that only fixed internal assets are written.
Audit Metadata