jev-use
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user or agent to execute shell commands such as
jev-use installandjev-use doctorto configure the MCP server and verify its functionality. - [DATA_EXFILTRATION]: Data placed in the
stateparameter of thejev_judgeandjev_gatetools is sent to external AI providers (such as TypeSafe, OpenRouter, or an AI Gateway) for processing. The skill specifically advises putting tool outputs and file excerpts into this field, which may contain sensitive information. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (e.g., tool outputs, file excerpts) within the
statefield for external judgment. - Ingestion points: The
stateparameter injev_judgeandjev_gatetools (SKILL.md). - Boundary markers: No explicit markers are defined in the skill to prevent embedded instructions in the ingested state from influencing the judgment model.
- Capability inventory: The skill provides tools for automated decision-making and gating, and requires shell command execution capabilities for setup.
- Sanitization: No sanitization or validation of the ingested
statecontent is mentioned.
Audit Metadata