scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as
mkdir -pto create nested directory structures,git commitandgit mvfor repository management, andpnpm ai-hero-cli internal lintto validate the created content. These operations are restricted to the local environment and the target project structure. - [INDIRECT_PROMPT_INJECTION]: The skill processes a user-defined plan to determine the naming and structure of new directories and files.
- Ingestion points: Exercise plans provided by the user and parsed by the agent according to
SKILL.mdworkflows. - Boundary markers: Not specified in the skill instructions.
- Capability inventory: Filesystem directory creation, file writing (readme.md), and git state modification.
- Sanitization: Content is validated by the internal
ai-hero-clilinter for structural correctness (e.g., non-empty files, no broken links), but no specific sanitization of input strings is noted.
Audit Metadata