aiready-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends several utility tools within the @aiready NPM scope (e.g., @aiready/cli, @aiready/pattern-detect). These are vendor-owned resources used for the skill's primary function of codebase analysis and optimization.\n- [COMMAND_EXECUTION]: The guidelines instruct AI agents to execute shell commands using npx to perform health scans, consistency checks, and pattern detection within the target codebase.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it involves scanning and refactoring local codebase content. If the files being analyzed contain malicious instructions in comments or string literals, the agent could potentially be misled during its operation. Evidence: 1. Ingestion points: local codebase files scanned by CLI; 2. Boundary markers: none; 3. Capability inventory: shell execution via npx, file modification; 4. Sanitization: none.\n- [SAFE]: No obfuscation, persistence mechanisms, or credential theft patterns were detected. The skill's behavior is consistent with its stated purpose of improving AI coding assistant effectiveness through architectural best practices.
Audit Metadata