umbraco-quickstart
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded default credentials (
admin@test.comandSecurePass1234) are used during the automatic creation of local Umbraco development instances. - [EXTERNAL_DOWNLOADS]: Fetches Umbraco CMS and UUI source code from official Umbraco GitHub repositories to facilitate extension development.
- [COMMAND_EXECUTION]: Performs shell command execution, including
npm run buildanddotnet run, to build and validate the created extensions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input which could be used to influence agent behavior.
- Ingestion points: Extension descriptions and project names provided by the user in SKILL.md.
- Boundary markers: None used when processing user-provided ideas.
- Capability inventory: Full
Bashaccess, file writing, and execution of build scripts (npm,dotnet). - Sanitization: No sanitization is applied to the user-supplied text before it is used in planning and implementation steps.
Audit Metadata