kirby-plugin-development
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow depends on ingesting data from the local file system and external knowledge sources, which could contain malicious instructions.
- Ingestion points: The workflow uses
kirby:kirby_plugins_index(found inSKILL.md) to read local plugin definitions andkirby:kirby_searchto query the knowledge base. - Boundary markers: There are no instructions defining explicit boundary markers or delimiters for the data returned by these tools.
- Capability inventory: The skill utilizes tools to initialize the environment (
kirby:kirby_init), search documentation, list local plugins, and render CMS pages (kirby:kirby_render_page). - Sanitization: The instructions do not specify a requirement to sanitize or validate the output of the discovery tools before the agent processes them.
Audit Metadata