skills/mono0926/skills/melos-manager/Gen Agent Trust Hub

melos-manager

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to generate and execute shell commands using the melos CLI tool (e.g., melos bootstrap, melos exec). This is the intended functionality for managing monorepos.
  • [EXTERNAL_DOWNLOADS]: The skill mentions installing the melos tool via dart pub global activate melos in CI environments. melos is a well-known, legitimate package in the Dart/Flutter community.
  • [INDIRECT_PROMPT_INJECTION]: The skill has the surface for indirect prompt injection as it analyzes user-provided melos.yaml files. 1. Ingestion points: Analyzes melos.yaml and project directory structures provided by the user. 2. Boundary markers: None explicitly defined in the skill instructions. 3. Capability inventory: Suggests shell command execution for build, test, and release tasks. 4. Sanitization: Relies on standard agent behavior when interpreting configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:58 AM
Security Audit — agent-trust-hub — melos-manager