threenix-add-scene-warmup
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches source code components and configuration from the
threenixMCP server using theget_component_referencetool. - [REMOTE_CODE_EXECUTION]: Instructs the agent to install and pin dependencies returned by the remote tool using the project's existing package manager.
- [COMMAND_EXECUTION]: Executes shell commands to perform type-checking, builds, and runtime verification of the integrated code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a remote tool which influences file writes and package installations.
- Ingestion point: Output from the
get_component_referencetool (SKILL.md). - Boundary markers: None defined for the tool output.
- Capability inventory: File system writes, dependency installation, and shell command execution (SKILL.md, Workflow steps 4, 6, 7).
- Sanitization: No explicit sanitization or validation of the tool's returned content is mentioned.
Audit Metadata