kirby-project-tour
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to perform a comprehensive inventory of a Kirby project, which involves reading and summarizing source files such as templates, snippets, controllers, and blueprints. These files constitute untrusted external data that enters the agent's context during the audit process.
- Ingestion points: Project files retrieved via
kirby:kirby_templates_index,kirby:kirby_snippets_index,kirby:kirby_controllers_index, andkirby:kirby_blueprints_index. - Boundary markers: The workflow lacks instructions for the agent to treat file content as data only or to ignore embedded instructions (delimiters or specific warnings are absent).
- Capability inventory: The agent has access to
kirby:kirby_runtime_installfor environment setup andkirby:kirby_searchfor exploring task playbooks. - Sanitization: There is no mention of sanitizing, escaping, or filtering the content of the project files before they are summarized or used to generate recommendations.
Audit Metadata