skills/mx-space/core/create-module/Gen Agent Trust Hub

create-module

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill utilizes the $ARGUMENTS placeholder for the module name, which is provided by the user.
  • Ingestion points: The $ARGUMENTS variable in SKILL.md is used to define file system paths and class names.
  • Boundary markers: The skill does not provide delimiters or instructions for the agent to ignore potentially malicious instructions embedded within the user-supplied argument.
  • Capability inventory: The skill facilitates file system modifications through file templates and includes a shell command execution for database migrations in SKILL.md.
  • Sanitization: There are no sanitization or validation steps for the $ARGUMENTS input.
  • [COMMAND_EXECUTION]: The skill includes instructions to execute the pnpm drizzle-kit generate command in SKILL.md, which is a standard developer workflow command for generating database migrations using the Drizzle ORM.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:24 PM