pma
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@nsio/nslpackage from the NPM registry to facilitate local development URL routing and reverse proxying. It also references the official GitHub gitignore repository for populating project configuration. - [COMMAND_EXECUTION]: The skill utilizes a custom Bash script (
scripts/task-state.sh) to manage task states with file locking viaflockand text processing withawkandsed. It also orchestrates development processes usingtmuxfor persistence andfuserorssfor process management. - [INDIRECT_PROMPT_INJECTION]: The skill reads and updates task, plan, and changelog files within the repository (
docs/task/,docs/plan/), which represents an ingestion surface for potentially untrusted instructions. Ingestion points: Task index and detail files, plan files, and the repository changelog. Boundary markers: The skill does not define specific delimiters for separating project data from instructions. Capability inventory: The skill possesses the capability to execute shell commands, perform file system operations, and initiate network requests for dependency verification. Sanitization: Thetask-state.shscript includes basic regex validation for theowneridentifier to prevent shell injection. - [DYNAMIC_EXECUTION]: The skill is designed to execute and manage project-specific development commands (such as
bun run dev,vite,cargo run) at runtime, often wrapped within a reverse proxy or persistent terminal multiplexer based on the project's stack.
Audit Metadata