scaffold-exercises

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands including mkdir -p to create directories, git mv and git commit for version control, and pnpm ai-hero-cli internal lint to validate the created structures.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to parse a user-provided plan to determine the folder structure, which represents an attack surface for indirect instructions. Ingestion points: The user-supplied 'plan' described in Workflow step 1 (SKILL.md). Boundary markers: None identified. Capability inventory: File system creation via mkdir, Git operations, and execution of the pnpm command (SKILL.md). Sanitization: No explicit sanitization of the input plan is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:23 PM