kirby-scaffold-page-type
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from the user (such as page names and field definitions) and reads existing project blueprints from the environment to inform the scaffolding process.\n
- Ingestion points: User-provided page names, fields, and Panel UX expectations; existing files read via
kirby:kirby_blueprint_read.\n - Boundary markers: The instructions do not define specific delimiters to isolate external data from the agent's instructions.\n
- Capability inventory: The skill utilizes dedicated platform tools (
kirby:) for file indexing, reading, and rendering; it does not employ arbitrary shell execution or direct network access.\n - Sanitization: The workflow relies on the inherent structure of the Kirby CMS framework and does not specify explicit sanitization steps for user-provided strings.
Audit Metadata