enonic-content-type-generator

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local script scripts/find-enonic-targets.mjs using Node.js to locate Enonic XP project directories within the workspace. The script performs read-only operations to detect project markers such as build.gradle or specific directory structures like src/main/resources/site.
  • [EXTERNAL_DOWNLOADS]: The documentation references official Enonic resources, including an XSD schema hosted on Enonic's official GitHub repository and links to the developer documentation. These references are used for validation and documentation purposes and target well-known, trusted domains associated with the skill's primary function.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided natural language descriptions to generate XML schemas. It mitigates potential injection risks by using a static XML template (assets/content-type.template.xml), requiring specific mapping to an internal reference catalog (references/content-type-reference.md), and performing validation steps to ensure the output is well-formed and consistent with platform requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:54 PM