wot-ui-cli
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard development tools such as
pnpmandnpmfor building projects (pnpm build), running tests (pnpm test), and performing code quality checks (pnpm lint,pnpm typecheck). - [EXTERNAL_DOWNLOADS]: The skill utilizes standard package management commands (
pnpm install) and custom scripts (pnpm sync:clone) to manage project dependencies and source code. These operations are restricted to the vendor's development context. - [INDIRECT_PROMPT_INJECTION]: The skill provides analysis capabilities such as
wot doctor,wot usage, andwot lintthat scan local project directories. - Ingestion points: Project source files (e.g.,
.vuefiles) and environment configurations scanned by the diagnostic tools. - Boundary markers: Not explicitly defined in the prompt templates.
- Capability inventory: The skill can execute shell commands for builds/tests and modify configuration files for various AI agents (e.g.,
.cursor/mcp.json). - Sanitization: The instructions focus on tool usage rather than input sanitization, which is typical for development-oriented analysis tools.
Audit Metadata