building-ui-bundle-app
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line tools including
npm,npx, andsf(Salesforce CLI) to manage project dependencies, generate templates, and handle deployment tasks. - [PROMPT_INJECTION]: The skill handles natural language user requests to generate code and execute system commands, representing an indirect injection surface. Ingestion points: Requirements analysis in
SKILL.md. Boundary markers: None. Capability inventory: Shell command execution (npm,sf) across all phases. Sanitization: None described for user-provided app requirements. - [SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or persistence mechanisms were detected.
Audit Metadata