nx-run-tasks
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines templates for executing shell commands using the Nx CLI, such as
nx run,nx run-many, andnx affected. These commands are used to perform project lifecycle tasks like building, testing, and linting. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its reliance on external inputs to construct executable commands.
- Ingestion points: Project names and task names provided by the user in natural language (SKILL.md).
- Boundary markers: None present to delimit or escape user-provided names within the generated commands.
- Capability inventory: Execution of arbitrary Nx tasks through shell access, which can execute project-defined scripts (SKILL.md).
- Sanitization: The instructions do not include steps for validating or sanitizing the project or task names before they are interpolated into the shell command.
Audit Metadata