skills/stolinski/s-stack/dex/Gen Agent Trust Hub

dex

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on executing the dex CLI to manage task lifecycles, archival, and directory configuration within the agent's environment.
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the @zeeg/dex package from the public NPM registry, which serves as the core utility for the skill's functionality.
  • [PROMPT_INJECTION]: The skill processes task data and external plan files which may contain embedded instructions, creating a surface for indirect prompt injection. 1. Ingestion points: Task data is read via commands like dex show, dex list, and dex plan from repository files and synced external items. 2. Boundary markers: No explicit delimiters or instructions are provided to help the agent distinguish between data and embedded instructions. 3. Capability inventory: The skill possesses capabilities for repository file manipulation and network synchronization with GitHub and Shortcut APIs. 4. Sanitization: There are no mechanisms described for sanitizing or validating task descriptions or result summaries before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 11:58 AM