page-spec
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill ingests data from several external files (BRIEF.md, BRAND.md, IA.md, etc.) to synthesize a page specification, creating an opportunity for instructions within those files to influence the agent.
- Ingestion points: BRIEF.md, BRAND.md, IA.md, DIRECTION.md, TOKENS.md, and docs/agents/design-rules.md.
- Boundary markers: Absent; there are no instructions to the agent to treat input file content strictly as data.
- Capability inventory: The skill has permissions to read local filesystem data and write new markdown files to the 'docs/site/pages/' directory.
- Sanitization: Absent; no validation or sanitization of input data is defined.
Audit Metadata