ui5-typescript-conversion
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform tasks such as
npm installoryarn installand executenpx @ui5/ts-interface-generatorto facilitate the conversion process.\n- [EXTERNAL_DOWNLOADS]: The skill requires the installation of several external Node.js packages, including@ui5/ts-interface-generator,@sapui5/types, and various Babel presets. These are standard development tools within the UI5 framework ecosystem.\n- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection during the project conversion process.\n - Ingestion points: Project source files (.js) and configuration files (package.json, ui5.yaml) are read by the agent as part of the conversion workflow (SKILL.md, Application Code Conversion section).\n
- Boundary markers: The instructions do not define delimiters or specific safety warnings to disregard potential instructions embedded within the codebase being converted.\n
- Capability inventory: The agent is granted the ability to modify the local file system and execute shell commands and package managers (SKILL.md, Project Setup Conversion section).\n
- Sanitization: There is no evidence of sanitization or validation performed on the input project data before it is processed by the agent.
Audit Metadata