chameleon-adapt
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands for project maintenance and quality assurance, including
pnpm installfor dependencies,gw cifor continuous integration checks, anduv runfor executing local UI auditing tools (glimpse). These operations are scoped to the local development environment for building and verifying the user interface. - [INDIRECT_PROMPT_INJECTION]: The
GroveTermsystem parses data-driven content strings using a[[term]]syntax to substitute terminology. While this creates a surface for indirect prompt injection if the source data is sourced from untrusted external inputs, the system is designed for internal UI theming and terminology management. - [EXTERNAL_DOWNLOADS]: The skill specifies the installation of project dependencies via standard package managers. It references internal vendor components from packages such as
@autumnsgrove/lattice/ui, which are consistent with the skill's authorship.
Audit Metadata