hackathon-repo-bootstrap
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates setup commands that instruct users to download and install third-party dependencies using standard package managers like npm and pip.
- [COMMAND_EXECUTION]: The skill provides a structured sequence of shell commands for project initialization, environment setup, and local server execution.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by using untrusted user inputs to generate executable code and configuration files.
- Ingestion points: The
mvp_featuresandproject_titleinputs are ingested and used to populate the project scaffold described inSKILL.md. - Boundary markers: Boundary markers are absent; the skill does not use specific delimiters or instructions to treat input data as non-executable text.
- Capability inventory: The skill produces shell commands in
startup_commandsand executable code snippets inllm_routing_scaffoldanddatabase_scaffoldwithinSKILL.md. - Sanitization: Sanitization is absent; the skill does not perform validation or escaping of input data before interpolating it into the generated output templates.
Audit Metadata