producthunt-launch-kit
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to inspect the local environment and interact with external APIs.\n
- Evidence: Uses
lsandcatto locate and read the first 80 lines ofREADME.mdandpackage.jsonfor product context (SKILL.md).\n - Evidence: Executes
curlto send generated prompts to the Google Gemini API (SKILL.md).\n- [EXTERNAL_DOWNLOADS]: The skill's documentation recommends installation through external package managers and specific registries.\n - Evidence: Recommends installation via
npx "@opendirectory.dev/skills"(README.md).\n - Evidence: Suggests installing plugins from
opendirectory-marketplace(README.md).\n- [DYNAMIC_EXECUTION]: The skill generates content and scripts at runtime to facilitate its core functionality.\n - Evidence: Generates a JSON payload file in
/tmp/ph-launch-request.jsonand then executes a complex shell command that pipes the output of an API call into apython3one-liner for JSON parsing (SKILL.md).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local files which could contain instructions intended to influence the agent's behavior or the API output.\n - Ingestion points: Reads product data from
README.mdandpackage.json(SKILL.md).\n - Boundary markers: Employs a structured JSON format for the API request, providing a level of separation between instructions and data.\n
- Capability inventory: The skill has the ability to execute shell commands, perform network requests via
curl, and write to the filesystem (SKILL.md).\n - Sanitization: No explicit sanitization or filtering is applied to the content extracted from project files before it is included in the generative prompt.
Audit Metadata