prototype
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user prompts and surrounding project code to generate executable prototypes, which creates a surface for indirect prompt injection.
- Ingestion points: User prompts and existing codebase context as specified in
SKILL.md. - Boundary markers: None identified; instructions do not explicitly require delimiting untrusted input.
- Capability inventory: Instructions involve generating and suggesting the execution of code (
pnpm,python,bunmentioned inSKILL.md). - Sanitization: No explicit sanitization or validation of the input content is mentioned before processing.
Audit Metadata