tool-call-configuration-for
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Several scripts in the
scripts/directory utilize thesubprocess.run()module to perform essential development tasks. Examples includesync_mise_primitives.py(executingmise --version),check_code_rules.py(invoking linters), andagentic_request_contract.py(running unit tests). These are standard operations for a development-oriented tool. - [EXTERNAL_DOWNLOADS]: The script
scripts/sync_mise_primitives.pyfetches official JSON schemas from thejdx/miserepository on GitHub (raw.githubusercontent.com). This download is performed to keep the skill's local primitive catalog synchronized with the externalmisetool version. The target domain is a well-known service and the content is limited to configuration schemas. - [DYNAMIC_EXECUTION]: The skill's
applycommand, implemented inscripts/lib/apply_plan.py, allows for the execution of validation commands defined within an integration plan. This mechanism is used to verify that modifications to an agent skill (such as inserting new behavior rules) do not break the target skill's existing test suite or static checks. The execution is confined to the target skill's directory. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through user-supplied
behaviorconfigurations (in Markdown, YAML, or JSON) which are then interpolated into generatedSKILL.mdfiles. While this creates a potential surface for instructions to be passed through, the skill mitigates risk by requiring domain-specific terminology throughscripts/domain_text.pyand strictly using templates for code generation, ensuring the resulting artifacts follow a predictable and safe structure.
Audit Metadata