build-monetized-app
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes links to official examples and guides hosted on GitHub (github.com/elizaOS).
- [COMMAND_EXECUTION]: The instructions guide the agent to build and push Docker container images to a registry as part of the application deployment process.
- [PROMPT_INJECTION]: The skill involves creating applications that process user-provided data, creating an indirect prompt injection attack surface.
- Ingestion points: External user messages are processed by the handleChat function in references/sdk-flow.md.
- Boundary markers: The example implementation does not include specific delimiters or instructions to prevent obedience to embedded user commands.
- Capability inventory: The resulting application has the capability to perform inference via the Eliza Cloud SDK and communicate with external API endpoints.
- Sanitization: No input sanitization or validation is implemented in the provided proxy server example.
Audit Metadata