assemble-lib-rules
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the local CLI command
opentaint health --rulesto retrieve information about the environment's built-in security rules. This is a vendor-provided tool used for its intended purpose of rule management. - [INDIRECT_PROMPT_INJECTION]: The skill processes external YAML data located in the
.opentaint/tracking/rules/lib/directory to generate new configuration files. - Ingestion points: Reads per-package lib tracking files from
.opentaint/tracking/rules/lib/. - Boundary markers: None identified in the prompt templates.
- Capability inventory: Writes YAML configuration files to
.opentaint/rules/java/security/. - Sanitization: No explicit sanitization or validation of the input YAML content is performed before interpolation into the output files.
Audit Metadata