run-dryrun
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to verify the presence of required environment variables and run the dryrun utility. Evidence includes
echo $SCALEKIT_ENVIRONMENT_URLandnpx @scalekit-sdk/dryrunin SKILL.md. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@scalekit-sdk/dryrunpackage from the NPM registry. This package is an official resource provided by the vendor (scalekit-inc). Evidence:npx @scalekit-sdk/dryrunin Step 4. - [REMOTE_CODE_EXECUTION]: Use of
npxinvolves downloading and executing remote code at runtime. As the target is a verified vendor package, this is considered intended and safe functionality. Evidence:npx @scalekit-sdk/dryrun. - [DYNAMIC_EXECUTION]: The skill relies on
npxto dynamically execute a CLI tool from the NPM registry. Evidence: Step 4 command blocks. - [INDIRECT_PROMPT_INJECTION]: The skill processes and interprets output from the CLI tool to provide diagnostics to the user. This creates a surface where the tool output could theoretically influence agent logic, though the scope is limited to error mapping. 1. Ingestion points: Command output from dryrun. 2. Boundary markers: None present. 3. Capability inventory: Command execution and environment variable access. 4. Sanitization: None present.
Audit Metadata