uniac
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from
docs.uniac.aiand installs theuniacCLI tool from the public NPM registry. - [COMMAND_EXECUTION]: The skill uses the
uniacCLI to perform core operations, includinguniac planfor validation,uniac project createfor resource provisioning, anduniac deployfor application lifecycle management. - [REMOTE_CODE_EXECUTION]: The instructions suggest using
npxto execute the vendor-provided@uniac/clitool directly from the network, which is a standard execution pattern for this platform. - [INDIRECT_PROMPT_INJECTION]: The skill ingests application metadata and instructions from
uniac.yamlfiles provided by the user. - Ingestion points:
uniac.yamlconfiguration files and project-specific manifests referenced inSKILL.mdandreferences/composition.md. - Boundary markers: Not explicitly defined in the instructional text.
- Capability inventory: File system access (reading configuration, writing deployment metadata to
.uniac/deploy.json), network access (pushing Docker images to the Uniac registry), and container orchestration via the local Docker daemon. - Sanitization: The skill relies on the
uniac plancommand to perform schema validation and reference checks on manifests before any deployment actions are taken.
Audit Metadata