aiox-sm
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local initialization script using Node.js (
node .aiox-core/development/scripts/generate-greeting.js sm) to generate a greeting message during the activation protocol. - [INDIRECT_PROMPT_INJECTION]: The agent processes untrusted project artifacts like PRDs, which could contain instructions intended to influence the agent's behavior. 1. Ingestion points: PRDs and project artifacts specified in the activation protocol and use cases. 2. Boundary markers: None identified. 3. Capability inventory: Local script execution via Node.js (SKILL.md). 4. Sanitization: No input validation or sanitization routines are specified for ingested documentation.
Audit Metadata