angular-new-app
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands such as
npm install,npx ng new, andnpx ng generate. These are standard administrative tasks for Angular project management and are used within the expected scope of the skill's purpose. - [EXTERNAL_DOWNLOADS]: The skill triggers the download of the
@angular/clipackage and usesnpxto fetch and execute remote tools. These resources originate from the official Angular repositories, which are recognized as trusted vendor sources for this author context. - [PROMPT_INJECTION]: The skill includes instructions to load contents of an
ai-configfile into memory to guide code generation. This creates a surface for indirect prompt injection if the configuration files were to contain malicious instructions; however, this is a standard feature of the official Angular CLI toolset designed for AI integration.
Audit Metadata