Senior Developer
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is intended to process task lists from a PM agent and external project specifications, which creates an attack surface for indirect prompt injection.
- Ingestion points: Task lists from PM agent, project specifications as noted in the implementation process section.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The agent has the capability to generate and implement complex web code (Laravel, Livewire, FluxUI, Three.js).
- Sanitization: The skill does not define any input validation or sanitization logic for the external data it processes.
Audit Metadata