run-nx-generator
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run 'nx generate', 'nx affected', and 'npx prettier'. This is the primary and expected function for an Nx-based developer skill.
- [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection through the interpolation of user-provided options into shell commands.
- Ingestion points: CLI flags such as --newVersion and --name in the bash execution scripts.
- Boundary markers: No specific delimiters or safety warnings are provided for the agent to treat these inputs as untrusted data.
- Capability inventory: The agent has access to the 'Bash' tool to execute these generated strings.
- Sanitization: The instructions do not define any sanitization or validation logic for the input parameters.
Audit Metadata