add-expert
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
bun render-cardsin thepackages/docsdirectory. This is a local development command used to generate static assets for the project. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided content into source code files, creating a potential surface for indirect prompt injection.
- Ingestion points: The agent collects expert metadata (names, social handles, and descriptions) from the user and inserts them into
packages/promo-pages/src/components/experts/experts-data.tsx. - Boundary markers: The instructions do not define explicit boundary markers or safety warnings for the agent to treat the input as untrusted data.
- Capability inventory: The skill writes to the local file system and executes shell commands via the
bunruntime. - Sanitization: No sanitization or validation steps for the expert's description or URLs are specified in the workflow.
Audit Metadata