build-and-check
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/check-fixture.pyscript utilizessubprocess.runto execute a synthetic test script within a temporary directory for validation purposes. This is a standard testing pattern and does not involve shell execution. - [DYNAMIC_EXECUTION]: The test utility
scripts/check-fixture.pygenerates and runs a Python script from an internal template to simulate the implementation loop. This behavior is contained within the test fixture and does not process untrusted external input. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external code and instructions, which represents an inherent attack surface. Ingestion points: The agent is instructed in
SKILL.mdto read target instructions, revision agreements, and readiness evidence. Boundary markers: The workflow relies on following authoritative agreements and explicit scope definitions to mitigate risks. Capability inventory: The skill involves file system modifications and the execution of checks via agent tools. Sanitization: The instructions recommend using actual parsers and schemas for configuration validation to ensure safety settings are respected. - [EXTERNAL_DOWNLOADS]: The
README.mdfile contains instructions to install the skill vianpxfrom the author's own repository (SirDarcanos/agentskills), which is a standard procedure for vendor resources.
Audit Metadata