photon
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the user to employ CLI tools like
photonandnpmfor the creation, installation, and management of local server instances. - [EXTERNAL_DOWNLOADS]: The platform supports installing Photon servers directly from third-party GitHub repositories using the
photon beamcommand and facilitates automatic installation of npm packages via the@dependenciesJSDoc annotation. - [REMOTE_CODE_EXECUTION]: The Photon runtime is designed to execute TypeScript code directly using
tsxand provides mechanisms for the dynamic installation and execution of remote code sources. - [PROMPT_INJECTION]: As an MCP server framework, Photons create a surface for indirect prompt injection. They are designed to process user/agent input while having access to significant capabilities: Ingestion points: Public methods in
.photon.tsfiles (e.g.,Weather.current). Boundary markers: None explicitly enforced by the framework documentation. Capability inventory: Network access (fetch), file system access (~/.photon/data/), persistent storage (this.memory), and task scheduling (this.schedule). Sanitization: Relies on the individual Photon author to implement.
Audit Metadata