flashdreams-preparation

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes the flashdreams-run-v2 utility via uv run to manage application preloading and execution.
  • [DYNAMIC_EXECUTION]: Involves runtime compilation and native library loading during the application initialization phase, which is standard for optimized model construction.
  • [EXTERNAL_DOWNLOADS]: Performs one-time downloads and extraction of assets required for the model construction process.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a command-line interface that ingests external data.
  • Ingestion points: The <slug> and <app-args> parameters in the shell command in SKILL.md.
  • Boundary markers: No delimiters or warnings are specified for the interpolation of these arguments.
  • Capability inventory: Subprocess execution via uv run across the skill logic.
  • Sanitization: The instructions do not specify sanitization or validation of the input arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 05:28 PM