validating-schema-basics
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill utilizes
find,grep, andsedto perform automated analysis and remediation of local TypeScript files. These actions are standard for the tool's purpose and do not target sensitive system paths.\n- [PROMPT_INJECTION] (LOW): The skill possesses a surface for Indirect Prompt Injection (Category 8) by ingesting local source code for analysis.\n - Ingestion points: Processes all
.tsand.tsxfiles in the working directory during the validation and remediation steps.\n - Boundary markers: Absent. The instructions do not provide delimiters or negative constraints to prevent the model from obeying instructions potentially embedded in the source code files.\n
- Capability inventory: The skill has file-write capabilities (
sed -i) and arbitrary command execution capabilities (npm test).\n - Sanitization: None. The content of source files is matched against regex patterns without validation or sanitization.
Audit Metadata