lifecyclemodel-automated-builder
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run-lifecyclemodel-automated-builder.mjsacts as a Node.js wrapper for thetiangongCLI tool. It interprets user-supplied flags like--inputand--out-dirto execute canonical CLI commands for building, validating, and publishing lifecycle model artifacts. Evidence of this is found in therunBuildandrunDelegatedLifecyclemodelCommandfunctions which orchestrate thetiangong lifecyclemodelinvocations. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it ingests and processes user-defined JSON manifests to determine the parameters of its file system and CLI operations. 1. Ingestion points: Manifest files read via the
--input,--manifest, or--requestparameters inscripts/run-lifecyclemodel-automated-builder.mjs. 2. Boundary markers: Absent. There are no explicit delimiters or 'ignore' instructions provided to the agent to mitigate instructions potentially embedded in the manifest data. 3. Capability inventory: The skill performs shell command execution through thetiangongCLI and writes various JSON and Markdown reports to the local file system as detailed in theWorkflowsection ofSKILL.md. 4. Sanitization: While the wrapper script parses CLI arguments, it does not implement internal sanitization or validation of the manifest's contents before they influence the build process.
Audit Metadata