Skills
skills/btwld/skills/rockets-crud-generator/Gen Agent Trust Hub

rockets-crud-generator

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/validate.js script invokes yarn build or npm run build using execSync to ensure the generated code compiles correctly within the project context.
  • [PROMPT_INJECTION]: This skill facilitates indirect prompt injection by generating TypeScript source code from user-provided JSON configurations. Ingestion points: JSON data ingested via scripts/generate.js through command-line arguments or standard input. Boundary markers: None; user-supplied values are interpolated directly into code templates without explicit delimiters. Capability inventory: scripts/integrate.js performs filesystem write operations and scripts/validate.js performs shell command execution. Sanitization: The logic includes routines to escape single quotes in DTO metadata and backslashes in regex patterns to mitigate basic code injection attempts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 02:35 AM