commandkit-ratelimit
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for the
@commandkit/ratelimitlibrary, providing standard configuration templates and usage examples. No credential harvesting or sensitive file access patterns were identified. - [SAFE]: The tool
tools/generate-ratelimit-config.mjsis a benign utility that prints a static configuration template to the console. It does not ingest user input, perform network requests, or modify the file system. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting untrusted data (command usage profiles and burst behaviors) to generate configuration recommendations.
- Ingestion points: Inputs defined in
README.mdandSKILL.mdused for configuration design. - Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded in the usage profiles.
- Capability inventory: The skill has no dangerous capabilities; the only provided script (
tools/generate-ratelimit-config.mjs) is a static printer with no network or write access. - Sanitization: Absent; the agent is expected to process the inputs to produce documentation or code snippets without automated filtering.
Audit Metadata