chameleon-adapt

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local shell commands for project maintenance and quality assurance, including pnpm install for dependencies, gw ci for continuous integration checks, and uv run for executing local UI auditing tools (glimpse). These operations are scoped to the local development environment for building and verifying the user interface.
  • [INDIRECT_PROMPT_INJECTION]: The GroveTerm system parses data-driven content strings using a [[term]] syntax to substitute terminology. While this creates a surface for indirect prompt injection if the source data is sourced from untrusted external inputs, the system is designed for internal UI theming and terminology management.
  • [EXTERNAL_DOWNLOADS]: The skill specifies the installation of project dependencies via standard package managers. It references internal vendor components from packages such as @autumnsgrove/lattice/ui, which are consistent with the skill's authorship.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 02:20 AM