configure-linting

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Bash to perform environment discovery (e.g., using find and grep) and to install development dependencies via package managers such as npm and uv.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves versioning data and configuration templates from official technology domains including biomejs.dev, astral.sh, and official GitHub repositories.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to the ingestion of untrusted data from multiple sources.
  • Ingestion points: Local project files (e.g., biome.json, pyproject.toml, Cargo.toml) and content fetched from external websites.
  • Boundary markers: The skill does not use delimiters or explicit instructions to prevent the agent from obeying instructions embedded in the ingested data.
  • Capability inventory: The agent has access to powerful capabilities including Bash for command execution, Write and Edit for file system modification, and WebFetch for network access.
  • Sanitization: No validation or filtering mechanisms are employed to sanitize content retrieved from files or the internet.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 12:47 PM