implement-command
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run several local shell commands including npm run build, npm run test-single, npm run lint, and redis-cli for development and validation purposes.
- [EXTERNAL_DOWNLOADS]: Fetches command definitions and documentation from official Redis sources, including their GitHub repository and the redis.io website.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external command specifications (JSON files) which could potentially contain malicious instructions intended to influence the code generation process.
- Ingestion points: External JSON specification files mentioned in SKILL.md (Step 0).
- Boundary markers: The instructions do not define specific delimiters to separate untrusted JSON data from the prompt logic.
- Capability inventory: The agent has the ability to execute shell commands and write TypeScript files.
- Sanitization: Input data is mapped to specific code structures without explicit sanitization steps.
Audit Metadata