lazycat-aipod-developer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to automatically execute the
lzc-cli box defaultcommand to retrieve environment configuration. This execution is performed without requesting user confirmation or providing the user an opportunity to review the action. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to take user requirements and generate complex deployment configurations, including
docker-compose.yml,lzc-manifest.yml, and Caddy server configuration scripts. It lacks instructions for sanitizing user-provided strings or using boundary markers, which could allow a malicious user to inject commands or unintended configurations into the target environment through the generatedsetup_scriptor volume mappings. - Ingestion points: User prompts requesting the construction, modification, or packaging of AI application configurations as defined in
SKILL.md. - Boundary markers: No delimiters or 'ignore embedded instructions' warnings are mandated for the agent to use when interpolating user data into deployment templates.
- Capability inventory: The agent generates shell script blocks (e.g., Caddy
setup_script), writesdocker-compose.ymlservice definitions, and executes thelzc-clitool. - Sanitization: The skill provides no guidance for escaping, validating, or filtering user-supplied values before they are integrated into generated scripts or YAML configuration files.
- [EXTERNAL_DOWNLOADS]: The skill provides examples that reference container images from
registry.lazycat.cloud. These are specific vendor resources for the 'Lazy Cat' platform described in the documentation and are used for standard deployment purposes.
Audit Metadata