discord-bot

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides shell commands for project scaffolding, including the creation of a .gitignore file and the setup of pre-commit hooks. These are standard development environment preparation steps.
  • [DATA_EXPOSURE]: The skill includes strong defensive guidance against credential leakage, providing specific templates for .gitignore to exclude secrets and instructions for setting up gitleaks and detect-private-key hooks.
  • [INDIRECT_PROMPT_INJECTION]: As the skill builds applications (Discord bots) that process external user messages and interactions, it creates an attack surface for indirect prompt injection. The skill mitigates this risk by recommending modern Discord Slash Commands (structured data) over raw message parsing and including 'input sanitization' in its security checklist.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs standard development tools and libraries from well-known sources, including the pre-commit framework and gitleaks for security auditing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 01:12 PM