paw-mkt-dashboard

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development commands including npm install and npm run dev to set up and launch the generated dashboard application in the local environment.
  • [EXTERNAL_DOWNLOADS]: The skill fetches necessary framework libraries and development dependencies from the official NPM registry to support the dashboard's operation.
  • [DYNAMIC_EXECUTION]: The skill generates a complete SvelteKit project structure, including reactive components, server routes, and a database management layer, based on brand-specific data found in the project workspace.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill reads various markdown files and configuration data from local brand directories (such as sostac/, campaigns/, and brand-context.md) to determine the dashboard's schema and content.
  • Boundary markers: There are no explicit instructions to the agent to ignore or delimit potentially malicious instructions that could be embedded within the brand's marketing documents or content files.
  • Capability inventory: The generated application has the ability to write to the file system (database persistence and JSON exports), execute SQL queries, and render markdown content into HTML.
  • Sanitization: The generated database layer primarily uses parameterized queries for data operations, although schema initialization and seed data insertion utilize raw SQL strings generated by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:40 PM