ti-expert
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a comprehensive knowledge base for Titanium SDK architecture, including structural tiers, memory management, and security fundamentals. No malicious instructions or hidden behaviors were identified during the analysis of the provided markdown and JavaScript assets.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool specifically for git and node operations. These are used to manage project source code and dependencies, which aligns with the stated purpose of analyzing and designing project structures.- [EXTERNAL_DOWNLOADS]: The documentation references external tools like the TiNy (tn) CLI wrapper and registries like npm for installing development dependencies such as ESLint and Appium. These are well-known resources within the developer community.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests untrusted project data through tools like Read, Grep, and Glob. While it has write and command execution capabilities, no specific malicious payloads were found. Evidence chain: 1. Ingestion points: Titanium project files (controllers, views, styles, etc.). 2. Boundary markers: Absent. 3. Capability inventory: Write, Edit, Bash (node/git). 4. Sanitization: Not explicitly implemented for project file processing.
Audit Metadata