product-lens
Warn
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Mode 3 ('User Journey Audit') instructs the agent to 'Clone/install the product as a new user.' This involves fetching code from external, potentially untrusted repositories.
- [REMOTE_CODE_EXECUTION]: The process of 'installing' a product often involves package managers (e.g., npm, pip, yarn) that execute arbitrary lifecycle scripts or post-install hooks, providing a path for remote code execution if the target repository is compromised.
- [COMMAND_EXECUTION]: To perform its tasks, the skill requires the agent to execute shell commands such as 'git clone' and various installation/build commands, which can be exploited if the inputs (repository URLs or project names) are malicious.
- [PROMPT_INJECTION]: The skill reads and processes untrusted data from project files and git history, creating an indirect injection surface.
- Ingestion points: Reads
README,CLAUDE.md,package.json, and git commit history (found in SKILL.md). - Boundary markers: Absent; the skill does not specify delimiters or warnings to ignore embedded instructions.
- Capability inventory: File reading, repository cloning, and software installation (found in SKILL.md).
- Sanitization: Absent; the skill does not mention validation or filtering of external project content.
Audit Metadata