dynamic-resources

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The file dynamic.json references a remote JSON schema hosted on GitHub (https://raw.githubusercontent.com/earendil-works/pi-mono/main/.../theme-schema.json). This is used for IDE/editor validation of the theme configuration and does not pose a security risk.
  • [PROMPT_INJECTION]: The prompt template in dynamic.md instructs the agent to summarize repository structure and build/test commands. While this creates a surface for indirect prompt ingestion from untrusted repository content, it is a core functional feature of a coding assistant skill.
  • Ingestion points: The agent reads the local repository structure and command metadata from the working directory.
  • Boundary markers: None provided in the template to isolate repository content from agent instructions.
  • Capability inventory: Uses the standard ExtensionAPI for resource discovery; no dangerous tools or elevated privileges are requested.
  • Sanitization: None performed on the repository metadata before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 05:39 PM