create-spsq
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for validating generated files using local shell commands, specifically
bin/synapseq,synapseq, orgo run ./cmd/synapseq. These commands are used to perform syntax checks on domain-specific language (DSL) files. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it reads and processes user-provided sequence files and library extensions before running validation commands.
- Ingestion points: Reading target
.spsqfiles and local.spscextensions as described inSKILL.mdandreferences/spsq-language.md. - Boundary markers: Absent; the skill relies on the structural rules of the line-oriented DSL.
- Capability inventory: Local shell command execution for file validation.
- Sanitization: The skill implements path restrictions (forbidding absolute roots and
..segments) and provides a structural checklist for manual file verification if automated tools are unavailable.
Audit Metadata