ask-json
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the@pivanov/claude-wirepackage. This is a vendor-owned resource provided by the author to support the skill's functionality. - [COMMAND_EXECUTION]: Instructions direct the agent to execute the
claude-wireCLI tool via Bash to process user prompts and JSON schemas. - [REMOTE_CODE_EXECUTION]: The use of
npxinvolves downloading and executing remote code from a versioned npm package. This is the intended distribution method for the vendor's tool. - [PROMPT_INJECTION]: The skill processes untrusted input. 1. Ingestion points: User input passed via
--promptand data read from--schema-fileor stdin. 2. Boundary markers: None explicitly defined. 3. Capability inventory: The tool performs an LLM call via the vendor's API but has no access to the local file system or network for tool use. 4. Sanitization: Output is strictly validated against a JSON schema.
Audit Metadata