effect
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download reference source code from the official Effect-TS GitHub repository (
https://github.com/Effect-TS/effect-smol) to maintain accuracy with current library versions. - [COMMAND_EXECUTION]: Directs the agent to use
git cloneto fetch the external repository into the project's.codemate/references/directory. - [PROMPT_INJECTION]: The skill establishes a surface for indirect prompt injection by requiring the agent to search and process content from an external repository.
- Ingestion points: The
.codemate/references/effect-smoldirectory containing external code. - Boundary markers: No explicit boundary markers or warnings for the agent to ignore embedded instructions within the external codebase are provided.
- Capability inventory: The skill utilizes search and file reading capabilities but does not perform unsafe operations like
eval(),sudo, or direct network exfiltration. - Sanitization: No explicit validation or filtering of the fetched repository content is performed before processing.
Audit Metadata