motoko-mops-package-maintenance
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to manage git branches, install dependencies via the mops package manager, and run build and test suites using dfx, moc, and icp.
- [EXTERNAL_DOWNLOADS]: Fetches the Motoko Prettier plugin from the NPM registry and utilizes the official MOPS setup action for GitHub CI. These are standard and well-known resources within the Motoko development ecosystem.
- [PROMPT_INJECTION]: Exhibits a surface for indirect prompt injection as it processes data from the mops.one registry and reads repository source files to automate documentation updates and code fixes. 1. Ingestion points: configuration files (mops.toml), external registry metadata (mops.one), and local source code (.mo and .md files). 2. Boundary markers: Absent; the skill does not use specific delimiters to separate instructions from processed data. 3. Capability inventory: File system write access for CI and metadata files, command execution for dependency installation, and git commit capabilities. 4. Sanitization: Absent; the skill processes content from registry and source files without explicit validation.
Audit Metadata