nx-integration

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to command injection because it interpolates user-provided parameters directly into shell command strings without validation. * Ingestion points: User-provided inputs for target, files, and scope in SKILL.md. * Boundary markers: Absent; there are no delimiters or instructions to prevent the agent from interpreting special shell characters within the input. * Capability inventory: The skill performs shell execution of nx commands and runs local scripts using the bun runtime. * Sanitization: No sanitization or escaping of input data is defined.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution to perform its primary functions, including nx affected and bun run for local project scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 10:49 AM
Security Audit — agent-trust-hub — nx-integration