svelte-code-writer
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
pnpxto download and run the@sveltejs/mcppackage at runtime. This package is the official Model Context Protocol implementation provided by the Svelte organization. - [COMMAND_EXECUTION]: Accesses system capabilities by executing CLI tools for listing documentation sections, retrieving content, and running code analysis. The instructions specifically include guidance on escaping shell characters (e.g., escaping
$as\$) to prevent accidental command injection or shell variable substitution when passing code to the terminal. - [INDIRECT_PROMPT_INJECTION]: The skill provides the
svelte-autofixertool which processes external Svelte code or files. This creates a surface where malicious instructions could be embedded within component code to influence the agent's behavior during analysis. - Ingestion points: Code snippets or file paths passed as arguments to
pnpx @sveltejs/mcp svelte-autofixerinSKILL.md. - Boundary markers: Absent; the content is passed directly as a string argument within the shell command.
- Capability inventory: The skill can execute Node.js tools that read local files and generate code analysis output for the agent to process.
- Sanitization: While shell-level character escaping is advised for safety, the skill does not implement logical sanitization or filtering of the Svelte code content to detect or neutralize embedded prompt injection attempts.
Audit Metadata