advanced-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile contains an example of using thegrepcommand to search through the skill's reference documentation. - [DATA_EXFILTRATION]: The
references/configuration-composition.mdfile provides code snippets for resolving environment variables usingprocess.env. This pattern is used for application configuration but identifies a mechanism for accessing sensitive environment data. - [PROMPT_INJECTION]: The skill outlines patterns for dynamic configuration processing that present a surface for indirect injection if untrusted data is processed.
- Ingestion points: The
resolveEnvVarsfunction inreferences/configuration-composition.mdingests configuration objects to resolve string tokens. - Boundary markers: The provided code templates do not include delimiters or instructions to ignore instructions embedded in the processed configuration.
- Capability inventory: The documentation references capabilities for network operations (via
axiosandmqttinreferences/factory-pattern.md) and command-line execution (grepinSKILL.md). - Sanitization: While the skill includes a
validateConfigpattern, the environment variable resolution implementation does not provide built-in sanitization to restrict which environment variables can be accessed.
Audit Metadata