configure-linting
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
Bashto perform environment discovery (e.g., usingfindandgrep) and to install development dependencies via package managers such asnpmanduv. - [EXTERNAL_DOWNLOADS]: The skill retrieves versioning data and configuration templates from official technology domains including
biomejs.dev,astral.sh, and official GitHub repositories. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to the ingestion of untrusted data from multiple sources.
- Ingestion points: Local project files (e.g.,
biome.json,pyproject.toml,Cargo.toml) and content fetched from external websites. - Boundary markers: The skill does not use delimiters or explicit instructions to prevent the agent from obeying instructions embedded in the ingested data.
- Capability inventory: The agent has access to powerful capabilities including
Bashfor command execution,WriteandEditfor file system modification, andWebFetchfor network access. - Sanitization: No validation or filtering mechanisms are employed to sanitize content retrieved from files or the internet.
Audit Metadata