zenstack-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The
CliPlugindocumentation includes an example that processes data from a ZModel AST and writes it to the file system. This pattern represents a standard vulnerability surface for indirect prompt injection where data from a schema file influences generated artifacts.\n - Ingestion points: The
generatecallback inSKILL.mdaccepts themodelobject (AST) representing the ZModel schema.\n - Boundary markers: The code example does not use explicit boundary markers or delimiters for the schema-derived data.\n
- Capability inventory: The example demonstrates the use of
fs.writeFileSyncto write generated content to the local disk.\n - Sanitization: The example does not include explicit sanitization of the AST content before it is written to the file system, which is standard for illustrative development documentation.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing
@zenstackhq/sdkand references@zenstackhq/orm, which are the official development packages provided by the author.\n- [COMMAND_EXECUTION]: The provided code snippets demonstrate expected developer capabilities such as writing files to an output directory and mention the framework's use ofjitifor loading TypeScript modules.
Audit Metadata