design-web-premium
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to perform research by fetching content from five external websites using platform tools, creating a surface for potential indirect prompt injection attacks. \n
- Ingestion points: Content retrieved from external websites via
web_fetch(SKILL.md). \n - Boundary markers: Absent. The instructions do not provide delimiters or instructions to ignore embedded commands in the fetched data. \n
- Capability inventory: The agent's capabilities are limited to generating React (.jsx) components and design documentation. No dangerous system access or network exfiltration tools are used (SKILL.md). \n
- Sanitization: Absent. There is no requirement to sanitize or validate the external content before analysis.
Audit Metadata