kstack-monorepo
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of development conventions and documentation for monorepo management. No indicators of prompt injection, data exfiltration, or malicious code execution were detected.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves processing monorepo workspace packages and README files. While this creates a surface for indirect prompt injection, it is considered safe as it is the primary intended function of the skill.\n
- Ingestion points: monorepo workspace packages (e.g., packages/*) and package README files.\n
- Boundary markers: None explicitly defined in the provided instructions.\n
- Capability inventory: The skill allows the agent to add, modify, and review code within workspace packages.\n
- Sanitization: No specific sanitization or filtering of file content is described in the conventions.
Audit Metadata