discord-bot-architect
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for building Discord bots that process untrusted input from Discord users via slash commands and interactive components (buttons, select menus).
- Ingestion points: The
interactionobject in Discord.js anddiscord.ApplicationContextin Pycord (found insrc/commands/ping.jsandmain.py). - Boundary markers: The skill does not explicitly use markers, which is standard for basic bot boilerplate code.
- Capability inventory: The templates include capabilities to reply to interactions, send embeds, and mention users across all scripts.
- Sanitization: No explicit sanitization or input validation is shown in the provided boilerplate code.
- [DYNAMIC_EXECUTION]: The skill uses dynamic loading to register commands and event handlers from local project directories.
- Evidence: The script uses
require(filePath)in a loop withinsrc/index.jsandbot.load_extension()inmain.py. - Context: This is a standard architectural pattern for modular Discord bots and is restricted to the local file system.
Audit Metadata