skill-validator
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands including
bunx markdownlint-cliand a local synchronization script./scripts/validate-skill-sync.shto perform file validation tasks.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes thebunxpackage runner to executemarkdownlint-cli, which may involve downloading the package from the public npm registry (a well-known service).\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and validate the contents of otherSKILL.mdand reference markdown files.\n - Ingestion points: Reads contents from
SKILL.mdandreferences/*.mdfiles within the workspace.\n - Boundary markers: Absent; there are no instructions to use delimiters or ignore embedded commands within the files being validated.\n
- Capability inventory: The agent possesses the capability to execute shell commands and run local scripts while performing these validations.\n
- Sanitization: Absent; the skill does not specify any sanitization, filtering, or escaping logic for the content of the files before processing.
Audit Metadata