wraps-quickstart
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to detect project context, including
cat package.json | grepto identify frameworks andlsto check for hosting configurations. It also runsaws sts get-caller-identityto verify the presence of AWS credentials. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to download and execute the vendor's CLI tool using
npx @wraps.dev/cli@latestand install the@wraps.dev/emailSDK. These resources originate from the vendor's own namespace. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files like
package.jsonto adapt its guidance. While this presents an ingestion surface for untrusted data, the use of targetedgreppatterns limits the risk of instruction leakage from the files being analyzed.
Audit Metadata