ln-773-cors-configurator
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local system commands for environment detection and validation purposes. Specifically, it uses
grepfor idempotency checks,dotnet buildorpython -m py_compilefor syntax validation, andcurlfor local preflight request testing againstlocalhost. - [EXTERNAL_DOWNLOADS]: The
diagram.htmlfile includes a reference to the Mermaid.js library viacdn.jsdelivr.net. This is a well-known and trusted Content Delivery Network (CDN) service used for rendering workflow diagrams. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it ingests data from untrusted local project files.
- Ingestion points: Reads project directory structures and configuration files like
.envandappsettings.jsonto detect frontend origins. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined for the input files.
- Capability inventory: The skill can perform file writes, execute build commands, and trigger local network requests via
curl. - Sanitization: The skill does not explicitly detail sanitization logic for the data read from project files before using it in code generation.
Audit Metadata