froq-web-app
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows where the agent reads and processes local configuration files to execute deployment commands. This establishes a surface for indirect prompt injection if those files contain malicious instructions.\n
- Ingestion points: The agent is instructed to read
void.config.ts,wrangler.jsonc, andcloudflare.config.ts(as seen inreferences/deploy-void.mdandreferences/deploy-cloudflare.md).\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat configuration content as untrusted data or to ignore embedded instructions.\n
- Capability inventory: The skill involves executing shell commands via
cf,void,pnpm, andwranglerCLI tools.\n - Sanitization: No sanitization, validation, or escaping of the data extracted from configuration files is specified before it is used in command execution.
Audit Metadata