slash-command-factory
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION] (SAFE): No instructions found that attempt to override safety protocols or extract system prompts. The documentation uses standard instructional language to assist the user in configuring command parameters.- [DATA_EXFILTRATION] (SAFE): The skill does not access sensitive files such as SSH keys or environment variables. It operates by generating output in a local 'generated-commands' directory and does not initiate network connections.- [REMOTE_CODE_EXECUTION] (SAFE): There are no patterns involving the download or execution of remote scripts via curl, wget, or package managers. The generated output is static Markdown content.- [COMMAND_EXECUTION] (SAFE): The shell commands provided in the 'HOW_TO_USE.md' file are standard 'cp' (copy) operations for manual configuration by the user and do not involve hidden or malicious sub-processes.- [INDIRECT_PROMPT_INJECTION] (LOW): While the skill generates prompts based on user input, it follows a structured YAML schema with clear boundaries. It includes a disclaimer for the user to validate the generated commands before manual installation.
Audit Metadata