nx-integration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to command injection because it interpolates user-provided parameters directly into shell command strings without validation. * Ingestion points: User-provided inputs for target, files, and scope in
SKILL.md. * Boundary markers: Absent; there are no delimiters or instructions to prevent the agent from interpreting special shell characters within the input. * Capability inventory: The skill performs shell execution ofnxcommands and runs local scripts using thebunruntime. * Sanitization: No sanitization or escaping of input data is defined. - [COMMAND_EXECUTION]: The skill relies on shell command execution to perform its primary functions, including
nx affectedandbun runfor local project scripts.
Audit Metadata