alcatchupspec
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the alignfirst utility from the official NPM registry.
- [COMMAND_EXECUTION]: Executes shell commands via npx to process tickets and protocol guides.
- [INDIRECT_PROMPT_INJECTION]: Processes external ticket history and guides, creating a surface for potential malicious instructions embedded in the ingested data.
Audit Metadata