5-steps
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill contains no executable scripts, binaries, or platform-specific configuration files. It consists solely of markdown instructions that define a workflow for the AI agent to follow. There is no risk of direct malicious code execution from the skill itself.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze existing codebases and external requirements (Step 2). This introduces a potential surface for indirect prompt injection if the files being analyzed contain malicious instructions. The risk is minimized by the skill's requirement for human approval at key stages of the process.
- Ingestion points: Existing source code files and requirement documents analyzed in Step 2.
- Boundary markers: No specific delimiters or boundary warnings are included for the data being analyzed.
- Capability inventory: The agent is tasked with writing code and potentially iterating on builds (Step 5), which requires file system access and execution capabilities provided by the agent's host environment.
- Sanitization: The skill does not define specific sanitization or validation logic for the external data it processes.
Audit Metadata