create-spsq

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for validating generated files using local shell commands, specifically bin/synapseq, synapseq, or go run ./cmd/synapseq. These commands are used to perform syntax checks on domain-specific language (DSL) files.
  • [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it reads and processes user-provided sequence files and library extensions before running validation commands.
  • Ingestion points: Reading target .spsq files and local .spsc extensions as described in SKILL.md and references/spsq-language.md.
  • Boundary markers: Absent; the skill relies on the structural rules of the line-oriented DSL.
  • Capability inventory: Local shell command execution for file validation.
  • Sanitization: The skill implements path restrictions (forbidding absolute roots and .. segments) and provides a structural checklist for manual file verification if automated tools are unavailable.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 11:41 PM
Security Audit — agent-trust-hub — create-spsq