tdk-doctor
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and act on output from the
tdk doctorcommand. This creates a surface where malicious strings in the environment state or configuration could influence agent behavior. - Ingestion points: Diagnostic output from
tdk doctor(SKILL.md). - Boundary markers: None specified to help the agent distinguish between data and instructions.
- Capability inventory: Local execution of
tdkCLI commands likedoctor,networks, andup. - Sanitization: No sanitization or validation of the command output is requested before processing.
- [COMMAND_EXECUTION]: The skill utilizes the
tdkcommand-line utility for project setup and health checks. These commands are local development tools associated with the skill author.
Audit Metadata