error-loading-not-found
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it analyzes project files to generate implementation suggestions for Next.js error boundaries and UI components.
- Ingestion points: Ingests project source code files via the
repo-filestool. - Boundary markers: Lacks explicit delimiters or instruction-isolation markers for processed file content.
- Capability inventory: Analyzes file structure and generates code for
error.tsx,not-found, andloading.tsxcomponents. - Sanitization: Does not implement specific input sanitization, relying on the agent's native safety guardrails.
- [EXTERNAL_DOWNLOADS]: The skill contains informational links to external resources for documentation purposes.
- Evidence: References the author's GitHub repository at
github.com/bh611627/skillcodexand the npm package@skillcodex/skills. These represent vendor-owned documentation and distribution points.
Audit Metadata