deno
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of JavaScript and TypeScript scripts using the Deno runtime through the
x deno runcommand. This is the primary and intended function of the skill.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes and executes local script files which could contain untrusted instructions. - Ingestion points: Local file paths provided for execution (e.g.,
script.ts). - Boundary markers: No specific delimiters or safety instructions are defined in the documentation to separate script content from agent instructions.
- Capability inventory: The Deno runtime is capable of filesystem and network access depending on the flags provided during execution.
- Sanitization: No explicit sanitization or validation of the script content is performed by the skill's instructions.
Audit Metadata