tech-stack-evaluator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE] (SAFE): The provided files do not contain any executable scripts (Python, JavaScript, Bash) or configuration files that would trigger system-level actions. The package is limited to documentation and JSON samples.
- [Indirect Prompt Injection] (LOW): The skill documentation (HOW_TO_USE.md) describes a feature for analyzing technology ecosystem health using external URLs (e.g., GitHub or npm). This creates an attack surface for indirect prompt injection if the processed content contains malicious instructions.
- Ingestion points: URLs provided in conversational or structured input (specified in HOW_TO_USE.md).
- Boundary markers: None identified in the provided documentation or samples.
- Capability inventory: No code provided, but functionality implies network read capabilities and text processing.
- Sanitization: None identified in the provided documentation or samples.
Audit Metadata