python-development-python-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of untrusted data.
- Ingestion points: The skill ingests user requirements via the
$ARGUMENTSplaceholder in theRequirementssection ofSKILL.md. - Boundary markers: There are no explicit boundary markers (such as XML tags or delimiters) or "ignore embedded instructions" warnings surrounding the interpolated input.
- Capability inventory: The skill instructs the agent to perform file writing (pyproject.toml, main.py, .env.example) and generate shell commands (
uv init,git init,uv add,django-admin startproject) based on the analyzed requirements. - Sanitization: No sanitization, validation, or escaping of the user-provided requirements is performed before they are used to influence code generation.
- [COMMAND_EXECUTION]: The skill provides templates for executing shell commands to initialize projects and manage dependencies. While these are intended for development, an attacker could potentially manipulate the user requirements to include malicious flags or concatenated commands within the suggested setup steps.
Audit Metadata