desainpakeai-prototype
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill dynamically fetches 'guides' from a remote server using the
dpai guide getcommand, which are used as the primary logic for authoring tasks. \n - Ingestion points: External content is brought into the agent's context through
dpai guide get,dpai context, anddpai design contextas described inSKILL.md. \n - Boundary markers: The skill does not instruct the agent to use any delimiters or safety prompts to isolate these external instructions from its core system behavior. \n
- Capability inventory: The agent can perform significant filesystem operations, including creating and patching files, as well as executing arbitrary CLI subcommands. \n
- Sanitization: No input validation or sanitization of the remote guide content is specified, allowing remote data to potentially control agent actions. \n- [EXTERNAL_DOWNLOADS]: The skill setup process involves downloading and installing the
desainpakeai-clipackage from the global NPM registry. \n- [COMMAND_EXECUTION]: The skill relies on shell command execution to perform all its core functions, including authentication, project initialization, and file system mutations.
Audit Metadata