syncore-cli-codegen

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of CLI commands through npx syncorejs. These commands are used for initializing projects, generating API code, and managing SQL migrations.
  • [EXTERNAL_DOWNLOADS]: The npx commands automatically download the @syncore/cli package from the npm registry if it is not already available in the local environment.
  • [PROMPT_INJECTION]: The codegen process identifies definitions in syncore/functions/**/*.ts to generate output in syncore/_generated/. This represents a surface for indirect prompt injection where data in the processed files could influence the agent's output.
  • Ingestion points: syncore/functions/**/*.ts (SKILL.md)
  • Boundary markers: None identified in the instructions
  • Capability inventory: Execution of CLI tools and file system modification (SKILL.md)
  • Sanitization: No explicit sanitization or validation steps are mentioned for the ingested source code
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 10:31 AM