nx-workspace
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
nxCLI and utilities likejqto explore workspace structure and execute tasks (e.g.,nx show projects,nx build). - [EXTERNAL_DOWNLOADS]: Documents the use of official initialization and migration tools from the Nx ecosystem, such as
npx nx@latest init, and mentions community plugins like@nx-aws-cache/nx-aws-cachefor remote caching. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface by processing workspace configuration data without explicit boundary markers.
- Ingestion points: Extracts project configuration using
nx show project <name> --json(reference/commands.md). - Boundary markers: Absent for the ingested configuration data.
- Capability inventory: Execution of
nxCLI and shell commands (SKILL.md). - Sanitization: Relies on standard CLI output without specific validation steps for the content of the workspace files.
Audit Metadata