folder-structure-blueprint-generator
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from the local file system, such as configuration files (package.json, pom.xml, requirements.txt) and directory structures, to generate its report. This creates a surface for indirect prompt injection where malicious content inside these files could influence the agent's behavior.
- Ingestion points: Local project files and directory structure scanned during the 'Initial Auto-detection Phase'.
- Boundary markers: Absent; the generated prompt lacks instructions to ignore or delimit embedded commands within the analyzed files.
- Capability inventory: The skill requires file-read access (via agent tools) to perform structural analysis.
- Sanitization: Absent; no filtering or validation of file content is performed before processing.
Audit Metadata