angular-new-app
Warn
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill metadata contains deceptive information by claiming the author is "Angular Team @ Google". This contradicts the actual skill source and could mislead users into ascribing official status to the instructions provided.
- [PROMPT_INJECTION]: The skill instructs the agent to load external configuration data into its active memory (context) without sanitization or boundary markers.
- Ingestion points: The contents of the configuration file specified via the
--ai-configflag are loaded into memory. - Boundary markers: None specified for the loaded configuration content.
- Capability inventory: The skill has access to shell execution via
npx ngfor building, generating code, and adding dependencies. - Sanitization: No validation or escaping is applied to the content loaded from the configuration file.
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to check for environments and perform project scaffolding.
- Evidence: Uses
which ng,where ng, andgcm ngto detect the CLI, followed bynpx ng new,npx ng build, andnpx ng generatefor application lifecycle management. - [EXTERNAL_DOWNLOADS]: The skill triggers the installation of external packages from the NPM registry.
- Evidence: Facilitates installation of
@angular/cliandtailwindcssusingnpmandnpx.
Audit Metadata