vale
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
valecommand-line utility to analyze files as specified inSKILL.md. This is the primary function of the skill and is used to generate linting reports. - [PROMPT_INJECTION]: The skill has an indirect prompt injection attack surface because it processes untrusted file content during the linting and fixing process.
- Ingestion points: External files provided via
<file-or-glob>as described inSKILL.md. - Boundary markers: Absent. No delimiters or instructions are provided to the agent to treat external file content as untrusted data.
- Capability inventory: Subprocess execution of the
valecommand and file modification capabilities used to apply linting fixes. - Sanitization: Absent. File content is read and processed without explicit sanitization or validation of embedded instructions.
Audit Metadata