spartan-ng-developer

Pass

Audited by Gen Agent Trust Hub on Oct 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides components for 'Chat and Agent UI' and a 'Diff viewer' recipe that ingest and display external content (messages, code snippets).
  • Ingestion points: hlm-message, hlm-bubble (in references/chat.md), and the tokenizedHunks signal in the diff viewer recipe (in references/recipes.md).
  • Capability inventory: The skill relies on standard Angular CLI and Nx commands for project management and component generation.
  • Boundary markers: The instructions advise keeping descriptions and errors inside the field group to let Brain handle ARIA association.
  • Sanitization: The diff viewer recipe in references/recipes.md explicitly includes an escapeHtml step before using bypassSecurityTrustHtml, which is a positive security practice for rendering code.
  • [COMMAND_EXECUTION]: The skill instructs the agent to perform project setup, dependency installation, and build verification using standard CLI tools.
  • Evidence: references/setup.md contains numerous commands for installing the library and initializing the environment, such as npm install, ng g @spartan-ng/cli:init, and npx nx g @spartan-ng/cli:ui.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 25, 2026, 12:51 AM