setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scans codebase files such as README and package.json to infer project context, which represents a potential surface for indirect prompt injection if those files contain malicious instructions. However, the risk is negligible as the skill only performs local file reading and documentation writing.\n
- Ingestion points: Codebase files (README, package.json, components.json, style guides) scanned in Step 1.\n
- Boundary markers: Absent.\n
- Capability inventory: Reading local project files and writing to markdown files (.better-react-web-ui.md and AGENTS.md).\n
- Sanitization: Absent.\n- [SAFE]: The skill's primary purpose is non-malicious documentation and context persistence. It does not perform network operations, execute remote code, or request elevated privileges. Use of project configuration files for context is a standard development practice.
Audit Metadata