tixmd-project-spikify
Warn
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses 'pnpx' to download the '@tixmd/cli' package from the npm registry at runtime.
- [REMOTE_CODE_EXECUTION]: The skill executes code from the downloaded '@tixmd/cli' package, which originates from an external source.
- [COMMAND_EXECUTION]: The skill executes shell commands, including 'cat' for local file access and 'pnpx' for running CLI tools.
- [PROMPT_INJECTION]: The skill reads untrusted data from '.tixmd/project.md' and existing tickets in '.tixmd/tixs/'. This represents an indirect prompt injection surface where malicious content in those files could manipulate the agent's behavior during ticket drafting. * Ingestion points: '.tixmd/project.md' and '.tixmd/tixs/'. * Boundary markers: None. * Capability inventory: Command execution via 'pnpx' and file reading. * Sanitization: The skill includes a human-in-the-loop review step for generated tickets, but no automated sanitization.
Audit Metadata