dependency-install-helper
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as an assistant for setting up project environments, which involves processing untrusted data from project configuration files (e.g., package.json, requirements.txt) and user input.
- Ingestion points: The skill requests OS/shell environment details and package manager lockfiles (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters to isolate untrusted data from agent instructions.
- Capability inventory: The skill body defines a conversational workflow and does not execute any shell commands, network operations, or file system writes.
- Sanitization: No input validation or sanitization mechanisms are defined in the instructions.
Audit Metadata