mf
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from
module-federation.ioand retrieves remote module manifests fromunpkg.com. It also facilitates the installation of external tools including the@divebell/cliand various@module-federationecosystem packages. - [COMMAND_EXECUTION]: The skill executes several local Node.js scripts to analyze project structure, configuration, and shared dependencies. It also utilizes
npxto run build-related tools such astscfor type checking andmf dtsfor type generation, and interacts with thedivebellCLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data which may contain embedded instructions, creating an attack surface for indirect prompt injection.
- Ingestion points: Processes content from
https://module-federation.io/llms.txtand remotemf-manifest.jsonfiles viascripts/module-info.js. - Boundary markers (absent): The skill lacks explicit boundary markers or instructions to the agent to ignore potential directives within the ingested remote content.
- Capability inventory: The skill possesses significant capabilities, including writing to local project configuration files (
rsbuild.config.ts,tsconfig.json,.env.local), executing shell commands viabash, and installing global NPM packages. - Sanitization (absent): No explicit sanitization or validation of the remote content is performed before it is processed or presented to the user.
Audit Metadata