fix
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run ESLint and Prettier commands based on detected project lock files in SKILL.md.\n- [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection and command injection.\n
- Ingestion points: File paths or patterns accepted as input in SKILL.md.\n
- Boundary markers: No delimiters or instructions are used to separate the user-provided path from the shell command logic in SKILL.md.\n
- Capability inventory: The skill has the capability to run arbitrary commands through the Bash tool as defined in SKILL.md.\n
- Sanitization: There is no evidence of sanitization or escaping for the variable in SKILL.md before it is interpolated into shell commands, which could allow command injection.
Audit Metadata