gpc-sdk-usage
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a detection script (
scripts/detect_gpc.mjs) that usesexecSyncto run standard version and configuration checks for the GPC CLI tool. These operations are limited to environment verification and use static command strings. - [INDIRECT_PROMPT_INJECTION]: The skill documents interactions with potentially untrusted external data (such as user reviews). It includes explicit instructions and rules for developers to use sanitization helpers (like the
p()parameter encoder) and error redaction to prevent injection and data leakage.
Audit Metadata