scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to automate development tasks:
- Executes
mkdir -pto create directory structures for exercises based on user-provided plans. - Uses
git mvandgit commitfor version control management of the scaffolded content to maintain history. - Runs
pnpm ai-hero-cli internal lintto validate the created structure against project-specific rules. - [INDIRECT_PROMPT_INJECTION]: The skill parses an external 'plan' to determine directory names and file content, which are then used as arguments in shell commands. This creates a surface for indirect prompt injection if the plan contains malicious strings designed to escape shell commands.
- Ingestion points: The instructions specify parsing a 'plan' (e.g., in the 'Example: stubbing from a plan' section) to extract section and exercise names.
- Boundary markers: None identified; the skill directly interpolates extracted values into command strings.
- Capability inventory: File system modification (
mkdir), version control operations (git), and execution of a specific CLI tool (pnpm ai-hero-cli). - Sanitization: The skill includes explicit instructions to the agent to use 'dash-case' (lowercase, hyphens), which acts as a logical constraint on the generated paths, though it relies on the LLM's adherence to the instructions.
Audit Metadata