commandkit-ratelimit

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for the @commandkit/ratelimit library, providing standard configuration templates and usage examples. No credential harvesting or sensitive file access patterns were identified.
  • [SAFE]: The tool tools/generate-ratelimit-config.mjs is a benign utility that prints a static configuration template to the console. It does not ingest user input, perform network requests, or modify the file system.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting untrusted data (command usage profiles and burst behaviors) to generate configuration recommendations.
  • Ingestion points: Inputs defined in README.md and SKILL.md used for configuration design.
  • Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded in the usage profiles.
  • Capability inventory: The skill has no dangerous capabilities; the only provided script (tools/generate-ratelimit-config.mjs) is a static printer with no network or write access.
  • Sanitization: Absent; the agent is expected to process the inputs to produce documentation or code snippets without automated filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 04:11 PM
Security Audit — agent-trust-hub — commandkit-ratelimit