multi-platform-architect
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection vulnerability surface identified in the component generation logic.\n
- Ingestion points: The
user_inputstring is processed in theMultiPlatformGenerator.generate_from_inputmethod and theRequirementsAnalyzerclass withintools.py.\n - Boundary markers: No delimiters or isolation instructions are implemented to separate user-provided content from the fixed template structures.\n
- Capability inventory: The skill performs file system write operations using
open().write()inexamples.pyand the CLI entry point oftools.pyto save generated components.\n - Sanitization: There is a lack of escaping or validation for the
descriptionfield in the templates (JS, Python, YAML, Markdown), which directly embeds the rawuser_input. This allows for potential injection of malicious logic or metadata into the generated files.
Audit Metadata