form-compile
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local PowerShell script (
scripts/form-compile.ps1) to perform its primary function of form compilation. This execution is performed using the agent's shell capabilities and is consistent with the skill's stated developer-focused purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process JSON files ('JSON DSL') provided by the user or external sources. This represents a standard attack surface for indirect prompt injection if the processed data contains instructions meant to influence the agent's future behavior. However, the skill provides a structured reference for the DSL, and no active exploitation patterns were found in the instructions or presets.
Audit Metadata