manage-skill-flavors
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves running standard repository maintenance and build commands, such as
npm run skills:build,npm run skills:pack,npm run skills:test, andgit diff. These actions are necessary for the skill's stated purpose of managing package flavors. - [DYNAMIC_EXECUTION]: The packaging process utilizes
prepackandpostpacknpm lifecycle scripts to dynamically modify the source tree during the build process. A transactional approach is used, including a recovery script (npm run skills:recover), to ensure the canonical source code is preserved and restored correctly. - [INDIRECT_PROMPT_INJECTION]: The flavor system merges override fragments into canonical instructions. Ingestion points: Markdown files located under the
skill-flavors/directory. Boundary markers: Compact HTML comments (<!--skill-flavor:...-->) are used at column 1 to delimit flavor-specific blocks. Capability inventory: The skill usesscripts/compose-skill-flavor.mjsand npm-based build tools to assemble final artifacts. Sanitization: The system includes automated validation (skills:validate), tarball inspection, and a required enablement switch (ENABLE_SKILL_FLAVOR_PUBLISH) for publication. - [SAFE]: The skill references the GitHub Packages registry (
https://npm.pkg.github.com/) for publication. As this is a well-known service and the actions involve vendor-scoped packages (@uipath/*), the network operations and registry configurations are considered safe development practices.
Audit Metadata