emulate-seed
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious code, exfiltration patterns, or obfuscation were detected. The skill provides clear documentation and configuration templates that follow security best practices, such as avoiding the use of real production tokens in test environments.
- [INDIRECT_PROMPT_INJECTION]: The 'auto-discover.sh' script processes project metadata to automate configuration setup, representing a minor attack surface.
- Ingestion points: 'package.json' (read via 'scripts/auto-discover.sh').
- Boundary markers: None.
- Capability inventory: Writing to a local configuration file ('emulate.config.yaml') via 'scripts/auto-discover.sh'.
- Sanitization: The script uses 'jq' to safely parse JSON and strictly matches dependency names against a static, internal mapping file ('references/dep-to-emulator-map.json') to determine which emulator blocks to generate, preventing arbitrary instruction injection.
Audit Metadata