rsbuild-v2-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands, specifically 'npx taze' for managing dependency updates and running build/test scripts to validate project changes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from local project files, which represents a potential attack surface where malicious content in project files could attempt to influence the agent's actions.
- Ingestion points: The skill reads project metadata from 'package.json' and configuration logic from Rsbuild config files.
- Boundary markers: The instructions do not define specific delimiters or security boundaries for the ingested data.
- Capability inventory: The agent is granted the capability to modify file contents and execute shell commands via 'npx' and npm scripts.
- Sanitization: No explicit sanitization or validation steps are defined for the project files before they are processed by the agent.
Audit Metadata