hotwire-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and recommend patterns based on project source code using tools like
Read,Grep, andGlob. This introduces an attack surface where malicious instructions embedded in the analyzed code could potentially influence the agent's behavior.\n - Ingestion points: Project source code files (e.g., controllers, views, and JavaScript files) accessed via the
Read,Grep, andGlobtools.\n - Boundary markers: The skill does not define specific delimiters or instructions to the agent to treat analyzed code as untrusted data or to ignore embedded instructions.\n
- Capability inventory: The skill allows for code analysis and recommendation but does not include high-privilege tools like arbitrary shell execution or broad network access.\n
- Sanitization: There is no evidence of sanitization or filtering applied to the data ingested from project files before it is processed by the agent.
Audit Metadata