cdlab-projects
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official tools from well-known services, such as
@cloudflare/next-on-pagesvia npx, and provides instructions for cloning the vendor's own reference repository (github.com/WuChenDi/projects). These are legitimate resources associated with the skill's intended purpose. - [COMMAND_EXECUTION]: The playbooks utilize standard shell utilities (
cp,sed,grep,find) and package manager commands (pnpm,bun,wrangler) to perform project scaffolding, placeholder substitution, and local development tasks. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user-supplied data (such as application names and descriptions) to generate project files. This behavior is a core component of its scaffolding functionality and does not exhibit malicious intent or unsafe interpolation patterns.
Audit Metadata