code-review
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze entire frontend code files, which creates a surface for indirect prompt injection if malicious instructions are embedded in comments or strings within the analyzed code.
- Ingestion points: User-provided frontend source files (.vue, .jsx, .tsx, .ts, .js) as described in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or include directives to ignore embedded prompts in the analyzed content.
- Capability inventory: The skill performs text-based analysis and report generation; it does not request permissions for restricted tools like network access or shell execution.
- Sanitization: The skill analyzes raw source code without pre-processing or sanitizing potential instruction patterns.
Audit Metadata