admin-dashboard

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes the project's source code and configuration files to build the dashboard, which presents a surface for indirect prompt injection if the local files are maliciously crafted. ● Ingestion points: The scripts/inventory-data-model.mjs script reads Prisma schemas, SQL migrations, Drizzle/Mongoose definitions, and package.json from the local filesystem (e.g., SKILL.md step 2). ● Boundary markers: There are no explicit delimiters or specific instructions for the agent to disregard instructions embedded within the analyzed project files. ● Capability inventory: The skill executes a bundled script to read the filesystem and is designed to create or modify code files to implement the dashboard UI. ● Sanitization: The skill does not explicitly describe sanitization or filtering of names and metadata extracted from the project files before they are used to influence the agent's code generation tasks.
  • [COMMAND_EXECUTION]: The skill uses node to run a bundled inventory script (scripts/inventory-data-model.mjs). This script performs a static analysis of the local project directory using standard node:fs APIs to identify data models and the tech stack. It does not perform network operations or execute arbitrary shell commands beyond the localized discovery script.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:44 AM