nemoclaw-maintainer-runtime-provider
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data as it is designed to review and implement source code, creating a surface for indirect prompt injection. 1. Ingestion points: The agent is instructed to read various source files in the src/lib/onboard/runtime-provider/ directory, including contract.ts, registry.ts, and activation.ts. 2. Boundary markers: Explicit delimiters or warnings to ignore instructions embedded within the source code are not defined in the skill instructions. 3. Capability inventory: The skill allows for the execution of shell commands such as npm run and npx vitest to perform validation and tests on the source code. 4. Sanitization: There are no specific instructions for sanitizing or escaping the content of the source files before processing them.
Audit Metadata