visualize-page
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests storefront plan and brand documentation which acts as an untrusted input surface.
- Ingestion points: The skill reads external files including
brand.md,design.md,persona.md,products.md, and plan documents inSKILL.md. - Boundary markers: No explicit markers or instructions to ignore instructions embedded within these files are provided.
- Capability inventory: The skill can discover tools, generate assets using
lexsis_drafts.asset_generate, and perform imports vialexsis_asset_import.import. - Sanitization: No sanitization or data validation steps are identified in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill connects to an external storefront management service via MCP.
- Evidence:
agents/openai.yamlspecifies a connection to thelexsis-aiMCP server hosted athttps://mcp.trylexsis.com/mcp.
Audit Metadata