ai-wrapper-product
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill provides templates for structured prompts and system instructions used in product development. No instructions attempting to bypass safety filters or override agent behavior were found.
- [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network operations was found. The code examples demonstrate legitimate API usage and database logging for usage tracking.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and legitimate libraries such as '@anthropic-ai/sdk' and 'p-queue' for managing API requests. No unverified third-party dependencies or remote script executions are present.
- [COMMAND_EXECUTION]: There are no shell commands or subprocess calls that could lead to arbitrary command execution. The provided code is focused on JavaScript logic for API integration.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly instructs on the importance of input validation and sanitization when building AI wrappers, providing examples of length checks and error handling to mitigate risks.
- [DYNAMIC_EXECUTION]: No patterns of unsafe deserialization or dynamic code evaluation (e.g., eval or exec) were identified.
Audit Metadata