engineering-skills
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and automated commands for downloading official tools and libraries, such as the
@anthropic/gwsCLI tool, theai-agent-skillsinstaller, and various Node.js dependencies for Playwright and MCP integrations from the official npm registry. - [COMMAND_EXECUTION]: Multiple Python automation tools (e.g.,
pr_analyzer.py,gws_doctor.py,workspace_audit.py) usesubprocess.run()to interface with standard CLI utilities likegitandgws. Additionally, theplaywright-prosub-skill implements automated hooks that execute shell scripts for test validation and environment detection upon file operations. - [PROMPT_INJECTION]: The
ai-securitysub-skill documentation and itsai_threat_scanner.pytool contain lists of prompt injection signatures, such as 'ignore previous instructions' and 'DAN mode'. These are part of a defensive signature database used to detect and score injection risks in AI systems, rather than instructions intended to subvert the agent's behavior.
Audit Metadata