nodeboot-server-google-cloud-functions
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx degitto download a sample project template from the nodejs-boot GitHub repository. - [COMMAND_EXECUTION]: Provides instructions to run
pnpm devlocally to build the application and start the Functions Framework for testing. - [PROMPT_INJECTION]: The skill defines an entry point for an HTTP function that processes untrusted data via the
reqparameter. This constitutes an indirect prompt injection surface where external inputs could potentially influence the agent if the application logic does not implement strict input validation. - Ingestion points: The
req(request) object passed to thefunctions.httpcallback inSKILL.md. - Boundary markers: None present in the provided minimal entry point snippet.
- Capability inventory: The handler caches and executes the
GoogleCloudFunctionsServerlogic to process incoming requests. - Sanitization: The provided sample code does not include explicit validation or sanitization of the incoming request data.
Audit Metadata