rsdoctor-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
@rsdoctor/agent-clipackage and version metadata from the official npm registry (registry.npmjs.org). It also contains instructions for downloading package tarballs to inspect type definitions. These operations target a well-known service and are standard for development tooling. - [COMMAND_EXECUTION]: The skill executes shell commands for package management (
npm install), environment verification (rsdoctor-agent --version), filesystem searching (rg), and triggering project build processes (pnpm run build). These actions are core to the skill's purpose and include instructions to only run in authorized environments. - [INDIRECT_PROMPT_INJECTION]: The skill processes
rsdoctor-data.json, an external build artifact, to generate recommendations. This creates a vulnerability surface where malicious data could influence agent behavior. - Ingestion points: Reads
rsdoctor-data.jsonfrom various relative project paths (dist/,output/, etc.) as defined inSKILL.md. - Boundary markers: No explicit delimitation or instruction-filtering is applied to the ingested JSON content.
- Capability inventory: Includes execution of CLI analysis tools and build scripts as documented in
references/command-map.md. - Sanitization: No specific sanitization or validation of the JSON fields is described prior to processing.
Audit Metadata