themable
Warn
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README.md file contains instructions to install the skill directly from the vendor's official GitHub repository (https://github.com/wundercorp/themable-skill) using package managers like npx or yarn. This is a reference to a well-known service for skill distribution.
- [COMMAND_EXECUTION]: The shell script scripts/install-themable-hooks.sh modifies the .git/hooks directory to install a persistence mechanism. This ensures that the themable check script (scripts/check-themable.mjs) runs automatically during developer Git actions such as pre-push. While common for linters, this establishes automated code execution within the development workflow.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface in scripts/check-themable.mjs, which reads and processes the contents of the target codebase to detect hardcoded hex colors. Although it lacks explicit boundary markers or sanitization for this ingested data, the overall risk is mitigated by the absence of dangerous capabilities, such as dynamic code evaluation (eval), that would operate on the file content.
Audit Metadata