agentation
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches components and dependencies from the official npm registry (e.g.,
agentation,react,react-dom) and references setup tools from the Neondatabase GitHub repository. - [COMMAND_EXECUTION]: Instructs the agent or user to execute standard shell commands for package management (
npm install,npx), file system cleanup (rm -rf), and build verification (npm run build). These are used to ensure the development-only toolbar does not persist in production builds. - [INDIRECT_PROMPT_INJECTION]: The skill configures a tool for capturing and syncing visual annotations. While this involves processing user-generated UI feedback, the impact is confined to the development environment, and no high-risk capabilities are exposed to the ingested data.
Audit Metadata