dynamic-resources
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The file
dynamic.jsonreferences a remote JSON schema hosted on GitHub (https://raw.githubusercontent.com/earendil-works/pi-mono/main/.../theme-schema.json). This is used for IDE/editor validation of the theme configuration and does not pose a security risk. - [PROMPT_INJECTION]: The prompt template in
dynamic.mdinstructs the agent to summarize repository structure and build/test commands. While this creates a surface for indirect prompt ingestion from untrusted repository content, it is a core functional feature of a coding assistant skill. - Ingestion points: The agent reads the local repository structure and command metadata from the working directory.
- Boundary markers: None provided in the template to isolate repository content from agent instructions.
- Capability inventory: Uses the standard
ExtensionAPIfor resource discovery; no dangerous tools or elevated privileges are requested. - Sanitization: None performed on the repository metadata before it is processed by the agent.
Audit Metadata