ide-extension-offering
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided product descriptions, platform architectures, and interview responses to generate IDE extension offering plans.
- Ingestion points: User-supplied platform context, feature requirements, and 'Interview' responses in
SKILL.md. - Boundary markers: The skill enforces strict output structures using the templates provided in
references/plan-templates.md. - Capability inventory: The skill provides instructions for generating CLI commands, publishing workflows, and telemetry configurations but does not include scripts for automated execution.
- Sanitization: The instructions include explicit security mandates, such as scanning packed extensions for secrets, auditing publisher permissions, and validating telemetry gates against host settings.
Audit Metadata