heap-snapshot-inspection
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npxto run the@paulirish/agentsCLI tool as part of its core workflow, resulting in command execution. - [EXTERNAL_DOWNLOADS]: The use of
npxdownloads the tool from the npm registry. - [INDIRECT_PROMPT_INJECTION]: The utility parses and displays properties from
.heapsnapshotfiles. If sourced from an untrusted environment, these files could contain malicious instructions embedded in object names intended to influence the agent. - Ingestion points:
heap-snapshot.jsreads heap snapshot files. - Boundary markers: Not present in the tool output.
- Capability inventory: The skill can execute shell commands and read local files.
- Sanitization: Not present; raw strings from the snapshot are printed.
Audit Metadata