manage-skill-flavors

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill involves running standard repository maintenance and build commands, such as npm run skills:build, npm run skills:pack, npm run skills:test, and git diff. These actions are necessary for the skill's stated purpose of managing package flavors.
  • [DYNAMIC_EXECUTION]: The packaging process utilizes prepack and postpack npm lifecycle scripts to dynamically modify the source tree during the build process. A transactional approach is used, including a recovery script (npm run skills:recover), to ensure the canonical source code is preserved and restored correctly.
  • [INDIRECT_PROMPT_INJECTION]: The flavor system merges override fragments into canonical instructions. Ingestion points: Markdown files located under the skill-flavors/ directory. Boundary markers: Compact HTML comments (<!--skill-flavor:...-->) are used at column 1 to delimit flavor-specific blocks. Capability inventory: The skill uses scripts/compose-skill-flavor.mjs and npm-based build tools to assemble final artifacts. Sanitization: The system includes automated validation (skills:validate), tarball inspection, and a required enablement switch (ENABLE_SKILL_FLAVOR_PUBLISH) for publication.
  • [SAFE]: The skill references the GitHub Packages registry (https://npm.pkg.github.com/) for publication. As this is a well-known service and the actions involve vendor-scoped packages (@uipath/*), the network operations and registry configurations are considered safe development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:22 PM