paw-mkt-dashboard
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands including
npm installandnpm run devto set up and launch the generated dashboard application in the local environment. - [EXTERNAL_DOWNLOADS]: The skill fetches necessary framework libraries and development dependencies from the official NPM registry to support the dashboard's operation.
- [DYNAMIC_EXECUTION]: The skill generates a complete SvelteKit project structure, including reactive components, server routes, and a database management layer, based on brand-specific data found in the project workspace.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads various markdown files and configuration data from local brand directories (such as
sostac/,campaigns/, andbrand-context.md) to determine the dashboard's schema and content. - Boundary markers: There are no explicit instructions to the agent to ignore or delimit potentially malicious instructions that could be embedded within the brand's marketing documents or content files.
- Capability inventory: The generated application has the ability to write to the file system (database persistence and JSON exports), execute SQL queries, and render markdown content into HTML.
- Sanitization: The generated database layer primarily uses parameterized queries for data operations, although schema initialization and seed data insertion utilize raw SQL strings generated by the agent.
Audit Metadata