rp-import-codegen
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from migration artifacts to generate source code, creating a surface for indirect prompt injection.
- Ingestion points: Reads configuration and schema data from
source-schema.json,mapping-plan.md, andsetup-requirements.mdfiles. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided for these ingested files.
- Capability inventory: Generates and writes executable JavaScript files (readers, transforms, and writers) to the local file system designed to interact with Wix APIs.
- Sanitization: No explicit sanitization or validation of the input artifact content is mentioned before it is used in the code generation process.
- [COMMAND_EXECUTION]: Provides instructions for running system-level commands such as
ngrok httpand configuring local network tunnels. - [EXTERNAL_DOWNLOADS]: Recommends the installation of external tools like
ngrokvia thebrewpackage manager and describes a process for copying library code from sibling skills into the project workspace.
Audit Metadata