quieter
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze the user's codebase and design context, which presents a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Analysis of "the codebase" and "design context" in the "Assess Current State" section (SKILL.md).
- Boundary markers: Absent; no specific instructions or delimiters are provided to isolate or ignore instructions within the analyzed design files.
- Capability inventory: None; the skill is a text-only instruction set and contains no associated executable scripts or network tools.
- Sanitization: Absent; no validation or filtering of the ingested content is specified.
- [NO_CODE]: The skill consists exclusively of markdown instructions and does not include any scripts, executables, or binary files.
Audit Metadata