discord-bot
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for project scaffolding, including the creation of a
.gitignorefile and the setup ofpre-commithooks. These are standard development environment preparation steps. - [DATA_EXPOSURE]: The skill includes strong defensive guidance against credential leakage, providing specific templates for
.gitignoreto exclude secrets and instructions for setting upgitleaksanddetect-private-keyhooks. - [INDIRECT_PROMPT_INJECTION]: As the skill builds applications (Discord bots) that process external user messages and interactions, it creates an attack surface for indirect prompt injection. The skill mitigates this risk by recommending modern Discord Slash Commands (structured data) over raw message parsing and including 'input sanitization' in its security checklist.
- [EXTERNAL_DOWNLOADS]: The skill references and installs standard development tools and libraries from well-known sources, including the
pre-commitframework andgitleaksfor security auditing.
Audit Metadata