rsdoctor-analysis
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
rsdoctor-agentCLI to perform data-fetch operations on build artifacts. It also utilizesnpmcommands for version verification and global package installation. - [EXTERNAL_DOWNLOADS]: The skill installs the
@rsdoctor/agent-clipackage from the npm registry. These downloads are within the scope of the skill's stated purpose and originate from the vendor's official package scope. - [INDIRECT_PROMPT_INJECTION]: The skill processes
rsdoctor-data.jsonfiles generated by build plugins. It mitigates potential injection risks by using a dedicated CLI tool with strict filtering (--filter), pagination, and token-based budget gates to ensure only expected data fields are processed.
Audit Metadata