prototype
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches development guidelines and utility configurations from official GitHub repositories managed by Google and Vercel Labs.
- [REMOTE_CODE_EXECUTION]: Executes external logic through the
npx skills addcommand. The skill suggests tools from trusted sources but also allows for the installation of arbitrary packages discovered during runtime searches. - [COMMAND_EXECUTION]: Employs shell commands via the
Bashtool to perform project scaffolding, initialize Git repositories, and manage local configuration files. - [PROMPT_INJECTION]: The skill ingests untrusted data from external search results and user-supplied arguments, creating a surface for indirect prompt injection.
- Ingestion points: User input via the
$ARGUMENTSparameter and package metadata retrieved during thenpx skills findstep. - Boundary markers: No explicit delimiters are used to isolate untrusted data from the agent's core instructions.
- Capability inventory: The skill has access to
Bashfor command execution andWritefor modifying the local file system. - Sanitization: There is no evidence of validation or filtering for data processed during the prototyping workflow.
Audit Metadata