eval-generator-code-app

Detected use of eval() or Function() constructor with dynamic input. This can lead to code injection if the input is user-controlled. Avoid eval() entirely. Use JSON.parse() for data deserialization or a safe expression evaluator for computed values.

eval()

User input from an Express request is used to construct a file path. This could allow an attacker to read or write arbitrary files using path traversal sequences like '../'. Use path.resolve() with a base directory and validate the result stays within the intended directory, or use path.basename() to strip directory components.

taint source (line 129): d.name → sink: writeFileSync(dashboardPath, html

JavaScript dynamic code execution (new Function / setTimeout/setInterval with a string body) (seen 2 times in this file at lines 577, 705)

new Function(

The skill generates and executes shell scripts (`run-evals.ts`, `security-runner.ts`) that use `execSync` to run `npx tsx`. This creates a persistent mechanism for executing arbitrary code within the user's environment.

execSync('npx tsx runner/presence-runner.ts', { cwd: ROOT, encoding: 'utf-8', timeout: 60_000 });

child_process module imported — any exec/execSync/spawn call executes OS commands

import('child_process')

The skill claims to generate an eval suite for a specific project, but the instructions require it to walk the entire project root and potentially access sensitive files like `package.json` and `power.config.json` to perform security scans.

Use glob on src/ to identify: ... power.config.json exists

The skill instructs the agent to use its own custom logic for file discovery and analysis (e.g., 'Use glob on src/ to enumerate all files') instead of relying on standard platform tools, which can be used to bypass security monitoring of file access patterns.

Use glob on src/ to enumerate all files

The skill instructions reference `m365_download_file` and `m365_search_files`, which imply network access to Microsoft 365, but these tools are not declared in the allowed-tools manifest.

Use m365_download_file (resolve file ID with m365_search_files first).

Skill executes commands, writes files, or accesses the network but declares no allowed-tools, so its tool surface cannot be reviewed or constrained.