tomtom-maps-sdk-js-preflight
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates repository maintenance by executing shell commands including
pnpm lint,pnpm build:sdk,pnpm test:sdk, andgit diff. These actions are scoped to the project workspaces and represent standard CI-like workflows executed locally for development consistency. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local file content and git diffs, which introduces a potential surface for indirect prompt injection if source code or documentation contains adversarial instructions designed to influence the reviewing agent.
- Ingestion points: The skill reads output from
git diffandgit status, as well as the content of repository files likeCODING_GUIDELINES.mdand source code. - Boundary markers: There are no explicit delimiters or safety instructions provided to the agent to isolate potentially untrusted content from its analysis instructions.
- Capability inventory: The skill possesses the ability to execute shell commands (
pnpm,git) and read local files within the monorepo scope. - Sanitization: No sanitization or filtering of the ingested file content is specified before the agent processes it for review.
Audit Metadata