qa
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze project source code located in directories such as
app/,components/, andcontracts/. This creates a surface for indirect prompt injection where malicious instructions embedded in the project files could attempt to influence the agent's audit report or behavior. - Ingestion points: Local project files read via the agent's file system tools.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded prompts within the source code being audited.
- Capability inventory: The skill is primarily instructional, but the agent environment typically allows file reading and command execution (e.g.,
grep,yarn,vercel). - Sanitization: No specific sanitization or filtering is applied to the content of the audited files before processing.
Audit Metadata