w-diagram
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (e.g.,
PRODUCT.md, MDX files, and source code) to generate Mermaid diagrams, creating a surface for indirect prompt injection. - Ingestion points: The skill reads local files, specifically
PRODUCT.md, MDX files, and other named code or documentation files. - Boundary markers: There are no explicit boundary markers or instructions telling the agent to ignore natural language instructions that might be embedded within the source files.
- Capability inventory: The skill is restricted to generating text output (Mermaid diagrams) and does not have access to tools for network operations, file writing, or command execution.
- Sanitization: The skill does not define any sanitization or validation logic for the content it processes.
Audit Metadata