generation-model-setup
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests content from external files to determine workflow catalogs.
- Ingestion points: The agent is instructed to read
../../references/WORKFLOW_SELECTION.mdand../generation-workflow-setup/SKILL.md(SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present.
- Capability inventory: The skill performs file write operations to
00_project/workflow_preferences.jsonand involves validation against a ComfyUI server. - Sanitization: No sanitization or validation of the ingested text is mentioned.
Audit Metadata