process-automated-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
@tiangong-lca/clipackage version 0.1.16 from the official NPM registry using thepnpm dlxcommand. - [COMMAND_EXECUTION]: Acts as a functional wrapper for the
tiangong-lcaCLI, invoking shell commands to execute subcommands likeidentity-preflight,build-plan, andauto-build. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted JSON and JSONL data from external files or standard input, creating a surface where malicious instructions could potentially influence the agent's behavior during data processing.
- Ingestion points: Arguments such as
--input,--flow-file,--flow-json,--flow-stdin,--results, and--rows-filein thescripts/run-process-automated-builder.mjsscript. - Boundary markers: No explicit delimiters or instructions are used to isolate untrusted data within the wrapper script.
- Capability inventory: The skill has the ability to execute shell commands and perform file system operations (read/write).
- Sanitization: The script performs standard JSON parsing validation (
JSON.parse) on input data before passing it to the CLI tool. - [DYNAMIC_EXECUTION]: The wrapper script dynamically generates temporary JSON files to pass structured data payloads to the CLI, which is a standard pattern for managing complex command-line arguments.
Audit Metadata