vibe-coding-explore
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code data which could contain instructions aimed at overriding agent behavior.
- Ingestion points: Source code retrieved via
smart_outline,smart_unfold, and standardReadoperations as described in the Workflow section ofSKILL.md. - Boundary markers: Absent; there are no instructions for the agent to ignore or delimit embedded natural language instructions within the code it reads.
- Capability inventory: The skill utilizes file system navigation, symbol searching, and code reading capabilities.
- Sanitization: No sanitization or filtering is applied to the content of the files before they are processed by the agent.
Audit Metadata