write-script-deno
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
wmillCLI to perform various development tasks. This includeswmill script previewto execute local script code,wmill generate-metadatato update local lockfiles and resolved dependencies, andwmill sync pushto deploy code to the Windmill workspace. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external dependencies via Deno's native import system (e.g., from
https://deno.land/) and thenpm:prefix. Thewmill generate-metadatacommand is specifically designed to resolve and fetch these remote packages. - [PROMPT_INJECTION]: The skill describes the implementation of "Preprocessor Scripts" which are designed to ingest untrusted data from various external triggers such as webhooks, HTTP requests, SQS, and emails. This creates a potential surface for indirect prompt injection where malicious instructions embedded in the trigger payload could influence the agent's behavior if not properly sanitized.
- Ingestion points: Preprocessor
eventparameter (body, headers, query) inSKILL.md. - Boundary markers: None mentioned.
- Capability inventory: Subprocess execution via
wmillCLI, file writing viagenerate-metadata, and network operations viawindmill-clientorfetch. - Sanitization: None mentioned.
Audit Metadata