rp-setup-discovery
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from
mapping-plan.mdandmapping-summary.mdto identify Wix-side setup requirements. This ingestion of untrusted content represents a potential attack surface for indirect prompt injection. - Ingestion points: Reads local files
mapping-plan.mdandmapping-summary.mdfrom themigrations/directory. - Boundary markers: No explicit delimiters or boundary instructions are provided to the agent to isolate the file content from instructions.
- Capability inventory: The skill possesses file read/write capabilities (creating
setup-requirements.md) and uses the Wix MCP for environment verification. - Sanitization: No explicit sanitization or input validation is specified for the processed data.
- [EXTERNAL_DOWNLOADS]: Documentation provides user-facing instructions to install
ngrokusingHomebrew(brew install ngrok) for media reachability. This is a well-known development tool, and the skill provides a clear placeholder (<YOUR_AUTHTOKEN>) for the user's own credentials, preventing credential exposure.
Audit Metadata