pre-flight-checklist
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard shell utilities to inspect the local development environment. Evidence includes the use of
lsoffor port checks,grepfor configuration parsing,catfor reading local status files, andcurlfor localhost health verification.- [EXTERNAL_DOWNLOADS]: The skill recommends ensuring local environment readiness by managing dependencies. Evidence includes instructions to executenpm installwhen required packages or thenode_modulesdirectory are absent.- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and act upon data from external task files. Ingestion points: tasks/next_task.md and tasks/progress.txt. Boundary markers: Absent; data is read and interpreted directly. Capability inventory: Includesnpm install,npx tsc, andload_skillcalls. Sanitization: Absent; the agent reads external content without specific filtering or delimiter protection.
Audit Metadata