Skills
Navigate
skills/modular/skills/new-modular-project/Gen Agent Trust Hub

new-modular-project

Warn

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The instructions recommend using sudo apt install gcc and sudo dnf install gcc to install necessary system-level compilers on Linux distributions.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses a user-specified project name to construct shell commands for environment initialization.
  • Ingestion points: User input for project name in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: Shell command execution via pixi init, uv init, mkdir, and cd across multiple scripts.
  • Sanitization: None detected in the instructions.
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads configuration and packages from official vendor repositories and well-known services.
  • Fetches packages from conda.modular.com and whl.modular.com.
  • Provides installation instructions linking to pixi.prefix.dev.
  • [COMMAND_EXECUTION]: The skill guides the agent to execute various CLI tools including pixi, uv, pip, and conda for environment setup.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 25, 2026, 02:10 PM