onyx-dev-stack
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage the Onyx Development Stack (ODS), including using
uv runfor dependency management andgo buildfor local compilation. - [DYNAMIC_EXECUTION]: The instructions involve building a binary from the local
tools/odsdirectory and executing it at runtime to facilitate environment setup. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read status and logs from the running stack (
ods stack status,ods stack logs). These outputs could contain untrusted data from the services under development. - Ingestion points: Reads from
ods stack status --jsonandods stack logsin SKILL.md. - Boundary markers: No delimiters or safety warnings are specified for processing these tool outputs.
- Capability inventory: Subprocess execution (
uv run,go build, binary execution) in SKILL.md. - Sanitization: No explicit sanitization or filtering of external/tool content is defined.
Audit Metadata