app-platform-router
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the setup of development and troubleshooting environments by fetching resources from external repositories. It instructs the agent to clone the
bikramkgupta/do-app-devcontainerrepository for devcontainer templates and utilizes container images hosted onghcr.io/bikramkgupta/for its sandbox and debug worker components. These downloads provide necessary templates and diagnostic tools used by the skill. - [COMMAND_EXECUTION]: Several management scripts, such as
add_client.py,cleanup_client.py, andsecure_setup.sh, use the Pythonsubprocessmodule or shell scripts to execute system commands. These commands interface withdoctl(DigitalOcean CLI),gh(GitHub CLI), andpsql(PostgreSQL client) to automate the provisioning of databases, the configuration of GitHub Secrets, and the management of App Platform components. This behavior is fundamental to the skill's operational tasks. - [PROMPT_INJECTION]: The
sandboxskill defines a surface for the execution of untrusted code by creating ephemeral, isolated container environments. While the documentation provides examples ofeval()andexec()patterns for building AI code interpreters, these are presented as instructional use cases for the sandbox environment rather than executable logic within the skill's own instructions. The skill proactively addresses security by emphasizing that such workflows should occur within the isolated sandbox boundary.
Audit Metadata