spartan-ng-developer
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides components for 'Chat and Agent UI' and a 'Diff viewer' recipe that ingest and display external content (messages, code snippets).
- Ingestion points:
hlm-message,hlm-bubble(inreferences/chat.md), and thetokenizedHunkssignal in the diff viewer recipe (inreferences/recipes.md). - Capability inventory: The skill relies on standard Angular CLI and Nx commands for project management and component generation.
- Boundary markers: The instructions advise keeping descriptions and errors inside the field group to let Brain handle ARIA association.
- Sanitization: The diff viewer recipe in
references/recipes.mdexplicitly includes anescapeHtmlstep before usingbypassSecurityTrustHtml, which is a positive security practice for rendering code. - [COMMAND_EXECUTION]: The skill instructs the agent to perform project setup, dependency installation, and build verification using standard CLI tools.
- Evidence:
references/setup.mdcontains numerous commands for installing the library and initializing the environment, such asnpm install,ng g @spartan-ng/cli:init, andnpx nx g @spartan-ng/cli:ui.
Audit Metadata