discord-bot-architect

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for building Discord bots that process untrusted input from Discord users via slash commands and interactive components (buttons, select menus).
  • Ingestion points: The interaction object in Discord.js and discord.ApplicationContext in Pycord (found in src/commands/ping.js and main.py).
  • Boundary markers: The skill does not explicitly use markers, which is standard for basic bot boilerplate code.
  • Capability inventory: The templates include capabilities to reply to interactions, send embeds, and mention users across all scripts.
  • Sanitization: No explicit sanitization or input validation is shown in the provided boilerplate code.
  • [DYNAMIC_EXECUTION]: The skill uses dynamic loading to register commands and event handlers from local project directories.
  • Evidence: The script uses require(filePath) in a loop within src/index.js and bot.load_extension() in main.py.
  • Context: This is a standard architectural pattern for modular Discord bots and is restricted to the local file system.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:44 AM