xstate
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The utility script
evals/extract_and_typecheck.pydynamically generates TypeScript source files and configuration (tsconfig.json) to perform automated type checking. It invokesnpm installandtscviasubprocess.runto ensure code correctness. These operations are restricted to a designated workspace directory and represent standard developer tooling behavior. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the design and review of state machines based on user-provided requirements and legacy code. This creates a surface for indirect prompt injection, as malicious instructions could be hidden in the input data. However, the skill lacks high-privilege capabilities such as arbitrary network access or sensitive file system writes, reducing the risk to a minimal level consistent with a code generation assistant.
Audit Metadata