dym-impeccable-detect-cli-scan
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides examples of shell commands for running the audit tool, including
npx impeccable detect,npm install, and direct execution of local binaries. - [REMOTE_CODE_EXECUTION]: The use of
npxallows for the download and execution of the 'impeccable' package from the npm registry. This is a standard developer workflow and follows the intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: The tool incorporates Puppeteer to fetch and render content from external URLs for layout and style analysis.
- [INDIRECT_PROMPT_INJECTION]: The tool processes untrusted content from local source files and external URLs, creating an ingestion surface for potentially malicious instructions embedded in the data.
- Ingestion points: Local source files (
.html,.css,.jsx,.tsx) and remote URLs rendered via Puppeteer. - Boundary markers: No specific delimiters are mentioned for the tool's output to differentiate between the tool's findings and content extracted from the target files.
- Capability inventory: File system access for reading source code, network access for URL scanning, and shell command execution via the CLI environment.
- Sanitization: The tool uses deterministic engines (regex, AST parsing) rather than LLMs for its internal logic, though no explicit sanitization of output is documented for the agent's consumption.
Audit Metadata